Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Credit Union Chilling CEO Fraud Story

I received this the last day of the year from a Director of IT Security who works at a mid-size credit union. "Stu, I think you’ll be interested in my story. If you want to share it, just ...
Continue Reading

Cyber criminals release hard to recognize social engineering scam.

Jerome Segura, a senior security researcher over at our friends at Malwarebytes reported about a new, in-the-wild tech support scam that has moved from Amazon Web Services to Rackspace's ...
Continue Reading

Top 10 Predictions for 2016: Read It, This Is A Good One

At the end of the year I spend a few days reading all the IT security pundit's 2016 predictions and synthesize them with my own perspective. The Crystal Ball issue is the shortest of the ...
Continue Reading

KMSAT 2016 has been released

We are excited to announce that the Kevin Mitnick Security Awareness Training 2016 module has been released. If your subscription is current, you will see it in the Training -> ...
Continue Reading

CyberheistNews Vol #5 #54 Scam Of The Week: Comcast Triple Threat

You are probably aware that Comcast is the largest home ISP in the U.S. and that they also have many thousands of business users. No wonder they are the target of a sophisticated social ...
Continue Reading

Scam Of The Week: Comcast Triple Threat

You are probably aware that Comcast is the largest home ISP in the U.S. and that they also have many thousands of business users. No wonder they are the target of a sophisticated social ...
Continue Reading

Major TeslaCrypt Ransomware Offensive Underway

This month, Symantec researchers reported a boost in TeslaCrypt attacks, going from 200 a day to 1,800. TeslaCrypt first appeared in March 2015, and differentiated itself because many of ...
Continue Reading

Data Breach Caused By Phishing Results in $750,000 HIPAA Penalty

Federal regulators have hit the University of Washington Medicine with a $750,000 penalty and a corrective action plan as part of a HIPAA settlement after a 2013 malware-related breach ...
Continue Reading

CyberheistNews Vol #5 #53 Despite Warnings, CEO Fraud Scams Still Successful And Growing

In the last few months, law enforcement has warned repeatedly about a new scam that is rapidly expanding. The FBI calls it "Business Email Compromise" (BEC), but it is better known as ...
Continue Reading

Kaspersky Sees Ransomware Doubling Year Over Year

Antivirus company Kaspersky has been monitoring ransomware pretty much from the get-go. Not surprising, as they are in Moscow and the main ransomware malware developers are Russian as ...
Continue Reading

Despite Warnings, CEO Fraud Scams Still Successful And Growing

In the last few months, law enforcement has warned repeatedly about a new scam that is rapidly expanding. The FBI calls it "Business Email Compromise" (BEC), but it is better known as " ...
Continue Reading

CyberheistNews Vol #5 #52 Scam Of The Week: Apple ID Suspension Phish With A Twist

OK, this scam is widespread enough to alert your users about it. The email claims to be from Apple Support and says your Apple ID and iCloud are both going to be suspended because you did ...
Continue Reading

Scam Of The Week: Apple ID Suspension Phish With A Twist

OK, this scam is widespread enough to alert your users about. The email claims to be from Apple Support and both your Apple ID and iCloud are going to be suspended because you did not ...
Continue Reading

The Top 5 Reasons To Invest In Cyber Security

Here's a quick condensed overview, which you can use as bullet points in your 2016 budget discussion. Today, successful data breaches happen on a daily basis. The frequency of the attacks ...
Continue Reading

CyberheistNews Vol #5 #51 Hated Cryptowall 4.0 Now Infects Workstations with Powerful Exploit Kit

Earlier than expected - but similar to Cryptowall 3.0 - a few weeks after its release, the hated Cryptowall 4.0 ransomware is now being delivered via the Nuclear Exploit Kit (NEK), ...
Continue Reading

Cryptowall 4.0 Delivered via Nuclear Exploit Kit

Earlier than expected - but similar to Cryptowall 3.0 - a few weeks after its release, Cryptowall 4.0 ransomware is now delivered via the Nuclear Exploit Kit, (NEK) according to the ...
Continue Reading

CyberheistNews Vol #5 #50 When Your Corporate Culture Frowns On Mock Phishing Attacks

Now and then, when I talk to the IT people in larger organizations, they tell me they experience political headwinds in trying to get an awareness program rolled out that includes ...
Continue Reading

2016 Will Show Increase In Shareholder Cybersecurity Lawsuits

NYSE Governance Services and Infosec company Veracode recently published results of a survey over of 276 board members titled "Cybersecurity and Corporate Liability". A massive 60 percent ...
Continue Reading

When Your Corporate Culture Frowns On Mock Phishing Attacks

Now and then, when I talk to the IT people in larger organizations, they tell me they experience political headwinds in trying to get an awareness program rolled out that includes ...
Continue Reading

[INFOGRAPHIC] The Top 5 Holiday Scams To Warn Your Users About

There are certain holiday scams we tend to see year after year. This infographic is great to share with your users to help them make smarter security decisions!
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews