Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Conde Nast Caught in $8 Million Spear-Phishing Scam

[caption id="attachment_747" align="alignleft" width="225" caption="cybercrime site"][/caption] I wanted to bring to your attention another major cyberheist scheme that is making news. It ...
Continue Reading

Understanding ISAT (Internet Security Awareness Training)

ISAT is pronounced "Eye sat", and stands for Internet Security Awareness Training. It's our bread and butter here at KnowBe4.com, so it's something we like to communicate about regularly, ...
Continue Reading

Symantec "Trends for 2010" Report Emphasizes Increased Mobile Cybercrime Threats

Every April, Symantec publishes its Internet Security Threat Report for the preceding year. This month, the company released the latest item in that series entitled " Symantec Internet ...
Continue Reading

Smartphone Users at Greatest Risk for Phishing

In the wake of the recent Epsilon e-mail hack, I came across a CNN article " Mobile users more vulnerable to e-mail phishing scams." In that story the reporter, Amy Gahran, asserts the ...
Continue Reading

Do Your PCs Come With "For Rent" Signs for Cyberthieves?

Brian Krebs is a former reporter on the information security beat for The Washington Post who now runs his own Website KrebsOnSecurity.com in Northern Virginia. IN a recent (4/8/2011) ...
Continue Reading

Check Out These Top 10 Small Business Anti-Cybercrime Tools

Internet.com is a respected information technology publication that's been active on the Web since the late 1990s. Their spin-off Website SmallBusinessComputing.com is a great source for ...
Continue Reading

Three Quarters of All SMB Banking Cybercrime Happens Online

A recent study entitled "The 2011 Business Banking Trust Study" reports that three of every four small and midsized businesses that experienced banking fraud in the previous year incurred ...
Continue Reading

Millions of Consumer/Customer E-mail Addresses Stolen; Phishing Surely to Follow

Epsilon is one of the world's largest customer outreach e-mail companies, and generates legitimate traffic on behalf of a number of very large companies (see Table 1 below). Epsilon ...
Continue Reading

Cybercrime: Bank of America Joins Trusteer Ranks

Look what just showed up in my colleague's e-mail inbox this morning: I wrote in moderate detail about Trusteer in a blog post right here entitled " Cyberheist Snippet 4: More on Trusteer ...
Continue Reading

Cybercrime in Your Business

Continue Reading

Cybercrime: Ventura County, CA Credit Card Tax Payment System Hacked

Ventura County, California, is a small small county (population: 802,983 according to 2009 numbers from the US Census Bureau) north of the greater Los Angeles area. According to a March ...
Continue Reading

Successful certificate cybercrime obtains legit Web certificates

In a recent 3/23/2011 article entitled " Hack Obtains 9 Bogus Certificates for Prominent Websites; Traced to Iran," Wired Threat Level reports on a spectacular cyberheist of credentials ...
Continue Reading

Cybercrime: Fascinating 3-Part Series on Russian Cyber-Mafia in NetworkWorld

Talk about turning classwork into pure gold and professional kudos: Norwich University undergraduate student and ROTC cadet Bradley Guinen has teamed up with his instructor and ...
Continue Reading

Rustock Botnet Cybercrime Takedown, Thanks to MS-Led Multi-Party Effort

The infamous Rustock botnet, estimated by some parties to be responsible for between 30 and 50 percent of all the spam in the world—up to 30 BILLION items per day—has been taken down. ...
Continue Reading

Symantec's Latest 'State of Spam & Phishing' Report

Report #51 from Symantec, the "State of Spam & Phishing" for March 2011 is out. From the phishing side, the news is grim but not unexpected. Phishing is up 38.56% for the month, ...
Continue Reading

M86 Security Documents Clever New HTML-based Phishing Scam

In the ongoing game of cops-and-robbers that network security so often involves, the cops have recently upped the ante on phishing detection in modern Web browsers. These days browsers ...
Continue Reading

APWG Website Is a Great Anti-Phishing Resource

Continue Reading

Online Bank Cyberheists Reach Higher and "Restoration of Lost Funds"

The insurance industry trade Web site insuranceheadlines.com recently republished a fascinating story from Bloomberg dated June 18, 2010. It's entitled "Banking's big dilemma: How to stop ...
Continue Reading

Cybercrime: M86 Security Creates Security Suite for SMBs

Internet threat management company M86 Security recently announced a brand-new small business security suite that promises to help small businesses get a workable handle on their security ...
Continue Reading

Phishing: Malware Infected Web Sites Experience Explosive Growth

Heh! Heh! We're not sure if we were alarmed by the content in this recent CrunchGear blog post, or captivated by the cute "malweb critter" used to give the story a little visual interest ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews