Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Criminal Hackers Steal Your Database? See You In Court

Jim Flynn wrote: "Helping to demonstrate that every cloud has a silver lining if you look hard enough, hacking has proven to be of great benefit to the legal profession. That's because ...
Continue Reading

What KnowBe4 Customers Say About Us July 3, 105

Hi Stu, "We're happy with the product. Getting good feedback from users who've gone through the programme and my management is highly impressed with the quality of the information given. ...
Continue Reading

OPM Phishing Attack: "Your Data Was Hacked, How To Protect Yourself"

And yes, as we predicted, there are now phishing attacks that mimic Office of Personnel Management (OPM) data breach notifications. The breach has expanded to millions more records. It ...
Continue Reading

Scam Of The Week: Payment By Facebook Friend

As of last Tuesday, Facebook has switched on person-to-person (P2P) payments for users in the US to "instant-message" money to their friends, using the debit cards connected to their bank ...
Continue Reading

Confidence In Antivirus Falls To All-time Low

Bromium is a company with a new antivirus mousetrap, so it will try to make old mousetraps look, well... old. However, they do point out correctly that traditional antivirus is starting ...
Continue Reading

CyberheistNews Vol 5 #26 FBI Alert: Latest CryptoWall Ransomware Damage More Than $18 Million

CyberheistNews Vol #5 #26 June 30, 2015 FBI Alert: Latest CryptoWall Ransomware Damage More Than $18 Million The latest version 3.0 of CryptoWall, descendant of the infamous CryptoLocker, ...
Continue Reading

Patch Flash NOW Or Get Infected With CryptoWall

It is now urgent to patch any Adobe Flash Player machines in your network. Why? There is an exploit kit called Magnitude that now uses a recently patched Flash zero-day vulnerability. An ...
Continue Reading

FBI Alert: Latest CryptoWall Ransomware Damage More Than $18 Million

The latest version 3.0 of CryptoWall, descendant of the infamous CryptoLocker, is the most advanced and most damaging ransomware in the wild at the moment, specifically targeting U.S. ...
Continue Reading

World's Most Famous Hacker Kevin Mitnick: IoT Is Exploitable

Clad in a blue suit and conservative necktie, KnowBe4's Chief Hacking Officer Kevin Mitnick no longer looks the part of the precocious teen who started hacking into computer systems while ...
Continue Reading

CyberheistNews Vol 5 #25 Scam Of The Week: Spoofed CEO Money Transfer Request

CyberheistNews Vol #5 #25 June 23, 2015 Scam Of The Week: Spoofed CEO Money Transfer Request Heads-up, there is a real wave of this scam going on at the moment. I would copy and paste ...
Continue Reading

Magazine publisher loses $1.5M in phishing scam

Cyber-criminals have social engineered magazine publisher Bonnier Group out of at least $1.5m after hacking the CEO’s email. The total damage could be as much as $3.0 million. Bonnier ...
Continue Reading

Ransomware Resume Phishing Security Test Gets Monster Open Rate

Now here is a real IT Horror Story. A brand new KnowBe4 customer which had not yet trained their employees decided to test their staff with one of the new templates we had just released.
Continue Reading

The Seven Deadly Social Engineering Vices Updated

You may not be aware that there is a scale of seven deadly vices connected to social engineering (SE). The deadliest SE attacks are the ones that have the highest success rates, often ...
Continue Reading

Ransomware Gives Cyber Criminals Almost 1,500% Return On Their Money

A new report by Trustwave shows some stunning numbers. You would almost come to the conclusion you are in the wrong business. They looked at how much of an investment a cybercriminal ...
Continue Reading

LastPass Hacked. Be Alert For Phishing Attacks

LastPass, the popular online password management service has been hacked and data was stolen, including the password hints, which is why you need to be alert for scams trying to exploit ...
Continue Reading

CyberheistNews Vol 5 #24 Scam Of The Week: Resume Ransomware & The Truth About The OPMgate Hack

CyberheistNews Vol 5 #24 June 16, 2015 Scam Of The Week: Resume Ransomware The SANS InfoSec Forums noted that since Monday May 25th new CryptoWall 3.0 ransomware attacks started, using ...
Continue Reading

Gone phishing: How I taught my users to stop clicking everything

Familiar with SpiceWorks? It's the world's largest IT Admin community. One user wrote the 392nd entry in their Spotlight on IT. This is the story. There is a link at the end to the ...
Continue Reading

The Truth About The Massive OPMgate Hacking Scandal

The recent U.S. Government Office of Personnel Management hack is getting worse by the day. In Saturday's Wall Street Journal they revealed that apart from more than 4 million personal ...
Continue Reading

Annoying New Ransomware Attack Uses Girl Resumes

The SANS InfoSec Forums noted that since Monday May 25th a new version of CryptoWall 3.0 ransomware started, using both malicious spam and the Angler exploit kit (EK). The attack wave has ...
Continue Reading

CyberheistNews Vol 5 #23 How The NSA Killed Internet Security in 1978 & Scam Of The Week

CyberheistNews Vol 5 #23 June 9, 2015 How The NSA Killed Internet Security in 1978 & Scam Of The Week Need to get ammo for your IT security budget, but the people holding the purse ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews