Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

IRS Warns Against A Widespread CEO Fraud Phishing Scam

OK, heads up! This tax season there is a widespread new scam that specifically targets your HR and Accounting professionals. They get an urgent email from "the CEO" who asks them for all ...
Continue Reading

CEO Fraud Phishing Attack steals 11,000 W-2s From Health Care Workers

A phishing incident has compromised the personal information of 11,000 Pennsylvania Main Line Health employees. Officials said the incident occurred on Feb. 16 when an employee fell for a ...
Continue Reading

CyberheistNews Vol 6 #9 How To Suck At Information Security – A Cheat Sheet

CyberheistNews Vol Vol 6 #9 How To Suck At Information Security – A Cheat Sheet Lenny Zeltser is a business and tech leader with extensive experience in Infosec. His areas of expertise ...
Continue Reading

Snapchat Employee Fell For W-2 Phishing Scam

A Snapchat employee fell for a W-2 phishing scam last week, compromising the identity information of other existing and ex-employees. The FBI calls this a Business Email Compromise, also ...
Continue Reading

[ALERT] New Strain Of CEO Fraud: Urgent Request for W-2s

This morning, our Controller received an email from "me", stating the following: Alanna I want you to send me the list of W-2 copy of employees wage and tax statement for 2015, I need ...
Continue Reading

44% of ransomware victims in the UK have paid to recover their data

Danielle Correa at SC Magazine wrote: "A Bitdefender global study with respondents from the UK, the US, France, Germany, Denmark and Romania was conducted by iSense Solutions to discover ...
Continue Reading

Scam Of The Week - Netflix For Free

Netflix’s popularity continues to grow fast, and they recently launched their streaming service globally. Obviously that makes them a hacker target. At the moment, there are active ...
Continue Reading

Apple Defies U.S. Magistrate's Order To Unlock Shooter Suspect's iPhone

Apple this week released a statement regarding what has been an ongoing battle for months. The FBI requested that Apple unlock the encypted iPhone belonging to San Bernadino shooter Syed ...
Continue Reading

It's Here. New Locky Ransomware Hidden In Infected Word Files

[UPDATED FEB 22, 2016] It was only a matter of time, but some miscreant finally did it. There is a new ransomware strain somewhat amateurishly called "Locky", but this is professional ...
Continue Reading

Ransomware Roundup 2/15/2016

The bad guys have been awfully busy these last few days. Here is your ransomware roundup with the latest "new features".
Continue Reading

The KnowBe4 Phish Alert Button Versus JSocket RAT

Since releasing its free PhishAlert button in November 2015, KnowBe4 has been receiving a steady stream of emails flagged by users as potential phishing attacks. The email threats ...
Continue Reading

When do end-users click on phishing links?

We had a data scientist take a look at more than 4 years of aggregated clicking data and he came up with some interesting results, expressed in graphs. Here are some of the highlights:
Continue Reading

Fresh KnowBe4 2016 Datasheet with new Phish Alert button

We have just published a brand new 2016 datasheet that includes all the main features added over the last 12 months. What I'm highlighting is this exciting free option if you use Outlook ...
Continue Reading

Please vote for KnowBe4 at the Cybersecurity Excellence Awards.

Here is a short summary of why we are asking for your vote: Highest growth in customers over all competitive products Most complete suite of anti-phishing tools Easy-to-use, ...
Continue Reading

American Chamber Of Commerce Scam Is Spear-phishing Prep

You may be aware of Steven Weisman, Esq. He writes a great daily blog called Scamicide, and is a is a nationally recognized identity theft expert, experienced university lecturer, proven ...
Continue Reading

Ransomware Criminals Infect Thousands With Weird WordPress Hack

An unexpectedly large number of WordPress websites have been mysteriously compromised and are delivering the TeslaCrypt ransomware to unwitting end-users. Antivirus is not catching this ...
Continue Reading

World's Most Famous Hacker Raises $8 Million To Play In Billion Dollar Security Awareness Training Market

Hi Guys, this is too good to miss. Check out this brand new article in Forbes Magazine. They started out with:
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews