Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Intel Thinks Antivirus Is Shit And Dumps Useless McAfee

Remember that in a gray past, Intel had an antivirus product called Intel LanDesk Virus Protect? Well, that Intel LanDesk Virus Protect got acquired by Symantec in 1998, and Intel must ...
Continue Reading

"BadTunnel" Social Engineering Attack Hijacks Your Network Traffic

A researcher in China has discovered a design flaw in Microsoft Windows that affects all versions of the operating system using NetBIOS spoofing —including Windows 10— and lets an ...
Continue Reading

Top website domains are vulnerable to email spoofing

Don’t be surprised if you see spam coming from the top websites in the world. Lax security standards are allowing anyone to "spoof" emails from some of the most-visited domains, according ...
Continue Reading

Russian Cyber Mafia Is Back From Vacation With Smarter Locky Ransomware Strain

Threatpost reported that the notorious Necurs botnet is back in business, after mysteriously going dark for nearly a month. Researchers report the Necurs has returned to spewing massive ...
Continue Reading

IT'S SHOWTIME! Kevin Mitnick Episode on NATIONAL GEOGRAPHIC - THIS SUNDAY

National Geographic has done a special on Kevin Mitnick and it plays this Sunday!
Continue Reading

New KnowBe4 Survey: Ransomware Infections Double In Two Years

We have just released the first long-time study focusing on IT Pros experience with ransomware. In June 2016 we surveyed 1,138 companies in a variety of industries and compared your ...
Continue Reading

Expect Micro Ransomware: Extortion One Document At A Time

I have been following the development of ransomware closely since September 2013 when the ransomware plague was unleashed on the internet in the form of CryptoLocker and its copycats. At ...
Continue Reading

New RAA Ransomware Strain Created Entirely Using Javascript

Larry Abrams, who runs Bleepingcomputer was first to report on a new strain of ransomware called RAA. The criminal coders took the somewhat unusual step of writing the whole thing in ...
Continue Reading

Scam Of The Week: Orlando Nightclub Phishing Attacks

Just when you think they cannot sink any lower, criminal internet scum is now exploiting the tragedy in Orlando. Unfortunately, from this spot I have been warning about these lowlifes ...
Continue Reading

FBI: Business e-mail scam losses top $3 billion, a 1,300% increase in since Jan.

The FBI’s Internet Crime Complaint Center (IC3) this week said the scourge it calls the Business Email Compromise continues to rack-up victims and money – over $3 billion in losses so ...
Continue Reading

New Type of Spear Phishing Directly Targeted at IT Pros

A member of the SpiceWorks IT forums reported he had received a new type of hybrid attack: first a phone call to his desk, followed up with a phishing email laced with malware, promoting ...
Continue Reading

Scam Of The Week: Nasty Two-factor Auth Text Hack

We all know that two-factor authentication (2FA) is much better than just simple user/password credentials. However, there is a nasty spoofing trick that bypasses 2FA if the user does not ...
Continue Reading

Individual ransomware payments skyrocket to a whopping $20,000

Heads-up! Individual ransomware payments are getting very expensive. Companies are stockpiling Bitcoin in case they are hit, and a new low-profile strain of ransomware is actually causing ...
Continue Reading

Yikes: Ransomware scam targets lawyers with phony ethics complaints

Mike Mosedale at the Minnesota Lawyer wrote: "Talk about your dirty tricks. A new internet scam is targeting lawyers by exploiting one of their great fears: getting slapped with a ...
Continue Reading

CyberheistNews Vol #6 #23

Continue Reading

Scam Of The Week: FBI Warns Against Email Extortion

Your employees are being attacked both inside and outside the office. This new email extortion scam called CEO fraud can hit in both places, so it makes sense to warn them about this ...
Continue Reading

UltraDeCrypter Ransomware DOES NOT Decrypt Your Files

KnowBe4 gets regular calls from system admins who found us on the internet that are between a rock and a hard place. Backups failed and they have no way to revert to normal files. Worse, ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews