Cookie-stealing Feature Added by Phishing-as-a-Service Provider To Bypass MFA

Nov 9, 2022 8:50:47 AM By Stu Sjouwerman

The Robin Banks phishing-as-a-service platform now has a feature to bypass multi-factor authentication by stealing login session cookies, according to researchers at IronNet. The phishing ...

[EYES OUT] This Scary Strain of Sleeper Ransomware Is Really a Data Wiper in Disguise

Nov 9, 2022 6:54:55 AM By Stu Sjouwerman

This Data wiper replaces every other 666 bytes of data with junk. Techradar reported that a new data-wiping malware has been detected, infecting more and more endpoints with each passing ...

PhishER Turns Golden Hour Into Golden Minute

Nov 8, 2022 10:00:35 AM By Roger Grimes

Hospital emergency rooms around the world are fine-tuned to meet the requirements of the “Golden Hour”. The Golden Hour is a well-accepted medical fact that critically injured or ill ...

CyberheistNews Vol 12 #45 [EYE OPENER] Phishing Attacks Up 61% Over 2021. A Whopping 255 Million Attacks This Year So Far...

Nov 8, 2022 9:30:00 AM By Stu Sjouwerman

New Business Email Compromise Gang Impersonates Lawyers

Nov 7, 2022 10:23:46 AM By Stu Sjouwerman

A criminal gang is launching business email compromise (BEC) attacks by posing as “real attorneys, law firms, and debt recovery services.” The attackers send legitimate-looking invoices ...

[HEADS UP] Australia Continues to be Vulnerable to Cybercrimes as Half a Billion Has Been Lost to Scammers

Nov 7, 2022 10:23:44 AM By Stu Sjouwerman

Australia is the new hot spot for cyber attacks. The Australian Cyber Security Centre (ACSC) recently reported that Australia has been targeted by cybercriminals every 7 minutes, and the ...

[New Product] Users Making Security Mistakes? Coach Them in Real-Time with SecurityCoach

Nov 7, 2022 9:14:42 AM By Stu Sjouwerman

We are thrilled to announce a brand-new product designed to help you develop a strong security culture. SecurityCoach enables real-time security coaching of your users in response to ...

Russian trolls and bots are back, targeting Tuesday’s U.S. midterms.

Nov 7, 2022 6:51:03 AM By Stu Sjouwerman

Steven Lee Myers at the NYT had the scoop on this typical Russian influence operation which really is social engineering at scale: "The user on Gab who identifies as Nora Berka resurfaced ...

DHL Tops the List of Most Impersonated Brand in Phishing Attacks

Nov 4, 2022 2:36:21 PM By Stu Sjouwerman

As scammers shift their campaigns and learn from their successes, new data shows that the global delivery service is the current brand of choice, with equally familiar brands trailing ...

New LinkedIn-Impersonated Phishing Attack Uses Bad Sign-In Attempts to Harvest Credentials

Nov 4, 2022 2:36:05 PM By Stu Sjouwerman

With compromised LinkedIn credentials providing cybercriminals with ample means to socially engineer business contacts, this campaign is a stark warning for organizations.

Number Matching Push-Based MFA Is Only Half the Solution

Nov 4, 2022 10:14:34 AM By Roger Grimes

When push-based multifactor authentication (MFA) first came out, I was a big fan. I promoted it as a strong and safe MFA option in my book, Hacking Multifactor Authentication. That was ...

KnowBe4 Wins 2022 "Best Software" Awards From TrustRadius in Multiple Categories

Nov 4, 2022 10:00:00 AM By Stu Sjouwerman

KnowBe4 is proud to be recognized by TrustRadius in the first-ever “Best Software” Awards for overall, mid-size, and enterprise in the Security Awareness Training software category.

Phishing for Feds: Credential-Harvesting Attacks Found in New Study

Nov 3, 2022 1:47:30 PM By Stu Sjouwerman

A study by researchers at Lookout has found that credential-harvesting phishing attacks against US government employees rose by 30% last year. The researchers also found that nearly 50% ...

FBI: Watch Out for Student Loan Forgiveness Scams!

Nov 3, 2022 1:14:46 PM By Stu Sjouwerman

Scammers are taking advantage of the victims desire to take advantage of debt cancellation up to $20,000 – with the only one cashing in being the scammer!

CheckPoint Warns of Black Basta Ransomware as the Number of Victim Organizations Increases by 59%

Nov 3, 2022 1:14:42 PM By Stu Sjouwerman

This latest “new kid on the block” is gaining momentum and – according to CheckPoint – seeing successes with their attacks globally, calling their organizational structure “impressive.”

CISA Warns of Daxin Team Ransomware Group Targeting the Healthcare and Public Health Sector via VPNs

Nov 3, 2022 1:14:37 PM By Stu Sjouwerman

This new group makes the case that – as with any market – cybercriminals will focus on a niche sector they are experts on in order to improve their chances of success.

[On-Demand Webinar] Hacking Biometrics: If You Thought Your Fingerprints Were Safe, Think Again!

Nov 3, 2022 8:50:06 AM By Stu Sjouwerman

When you think of using biometric technology as part of your multi-factor authentication process, you assume these attributes are safe. Cybercriminals can’t hack your fingerprints, can ...

Phishing Resistant MFA Does Not Mean Un-Phishable

Nov 2, 2022 3:16:23 PM By Stu Sjouwerman

Human societies have a bad habit of taking a specific, limited-in-scope fact and turning it into an overly broad generalization that gets incorrectly believed and perpetuated as if it ...

[Scam of The Week] New Phishing Email Exploits Twitter’s Plan to Charge for Blue Checkmark

Nov 1, 2022 2:48:13 PM By Stu Sjouwerman

Michael Kan at PCMag had the scoop: A hacker is already circulating one phishing email, warning users they'll need to submit some personal information to keep the blue verified checkmark ...

CyberheistNews Vol 12 #44 [INFOGRAPHIC] KnowBe4 Top-Clicked Phishing Email Subjects for Q3 2022

Nov 1, 2022 9:30:00 AM By Stu Sjouwerman

Security Awareness Training Blog

View Topics