Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Chase Is Asking For Phishing Trouble

Chase bank says to click links if you suspect phishing. Huh? Yup, they do. Check out this email from Chase, scratch your head, and do not make this error in your own organization. If you ...

J.P. Morgan Hacked Because Malware Infects Employee PC

This morning, the Wall Street Journal reported on the front page that J.P. Morgan was hacked and suffered a cyberheist called "a significant breach of corporate computer security".

Bitcoin Phishing Click Rate Higher Than Regular Scams

The Proofpoint Threatinsight blog reported on something curious. They called their posting "Curiosity Clicks: Using Bitcoin’s hype for phishing fun" and came up with some interesting ...

CyberheistNews Vol 4, # 34 Cryptolocker Being Spread Via YouTube Ads

CyberheistNews Vol 4, # 34

A cybersecurity video you should really watch

Cybersecurity as Realpolitik by Dan Geer at Black Hat USA 2014

900,000 Android Phones Hit by Ransomware in 30 days

August 22, 2014 - Nicole Perlroth at the New York Times wrote: "You are guilty of child porn, child abuse, zoophilia or sending out bulk spam. You are a criminal. The Federal Bureau of ...

Not news: Windows Store is full of scam apps

Paul Thurrott over at WindowsIT Pro wrote:

Workers At U.S. Nuclear Regulator Fooled By Phishing

Antone Gonsalves at CSO reported something that worries me, and this SHOULD NOT BE at this day and age.

Cryptolocker Being Spread On YouTube Ads

VirusBulletin reported that cyber criminals now spread around Cryptolocker / CryptoWall via YouTube. The cyber criminals purchase advertising space and use exploit kits to infect ...

Reveton Ransomware Adds Powerful Password Stealer

The Avast Blog reports a new "password stealer" feature in the Reveton ransomware. Reveton is the type of "police" lock/screen ransomware which falsely alerts users they've broken some ...

Hacking Into Traffic Lights With a Plain Old Laptop Is Scary Simple

Gizmodo reported yesterday about a new study from the University of Michigan on the vulnerabilities of traffic lights which is shocking proof that we need to make some major changes, and ...

Video: SQL Injection Explained In 5 Minutes

I was at Black Hat and left my email address at the Imperva booth. They sent me this and it's a very good little intro: "SQL injection attacks have been around for more than ten years … ...

CyberheistNews Vol 4, # 33 New Ransomware Threat: TorrentLocker

CyberheistNews Vol 4, # 33

Study: Cyber Attacks hit 36 percent of Canadian businesses

More than one-third of Canada’s IT professionals know – for sure – that they’d had a significant data breach over the previous 12 months that could put their clients or their ...

KnowBe4's Email Exposure Check Discovers Data Breach

You are probably aware of the free one-time Email Exposure Check Pro (EEC Pro) we can run for you. We find all the email addresses of your domain that are out there available on the ...

Phishing: 4.5 million Community Health patients records stolen

n">(Reuters) - Community Health Systems Inc, one of the biggest U.S. hospital groups, said it was the victim of a cyber attack that originated in China, resulting in the theft of ...

NSA's Monstermind Aims To Detect And Stop Cyber Attacks Instantly

WIRED magazine had the scoop, by directly talking to Edward Snowden recently. An NSA program known as MonsterMind, currently under development, is being designed to detect and stop cyber ...

New CryptoLocker copycat: TorrentLocker

iSIGHT partners discovered a new ransomware strain, which uses components of CryptoLocker and CryptoWall but underneath the surface, the code is completely different from these two ...

As Expected: Robin Williams 'Goodbye Video' Facebook Phishing Message

The scammers are at it, as expected. There is now a Facebook phishing message that invites users to click a link and see an "exclusive" video of Robin Williams saying goodbye through his ...

Tenn. Firm Sues Bank Over $327K Cyberheist


Get the latest insights, trends and security news. Subscribe to CyberheistNews.