[Eye Opener] Both Job Seekers and Employers Should Be Aware Of New Sophisticated Scams

Jul 21, 2022 1:39:43 PM By Roger Grimes

With record low unemployment, a tight labor market, and increasing customer demand, everyone says it is an employee’s job market out there. But it is getting tougher to get a real job and ...

FBI Warns of Phony Cryptocurrency Investment Apps

Jul 20, 2022 10:32:58 AM By Stu Sjouwerman

Cryptocurrency investors have lost nearly $43 million to fraudulent cryptocurrency investment apps, according to the US Federal Bureau of Investigation (FBI).

Cybersecurity Should be an Issue for Every Board of Directors

Jul 19, 2022 4:48:17 PM By Stu Sjouwerman

With so many Boards focused on operations, revenue, strategy, and execution, they completely are forgetting the simple fact that a single cyberattack can bring all that to a screeching ...

CyberheistNews Vol 12 #29 [Heads Up] New Phishing Attacks Shame, Scare Victims into Surrendering Twitter, Discord Credentials

Jul 19, 2022 9:15:17 AM By Stu Sjouwerman

New Multi-Factor Authentication Prompt “Bombing” Attacks Give Access to Laptops, VPNs, and More

Jul 19, 2022 8:16:07 AM By Stu Sjouwerman

While multi-factor authentication (MFA) significantly reduces an organization’s threat surface by making the stealing of credentials much harder, a new attack takes advantage of phone ...

Copyright Claim Email is a LockBit Ransomware Phishing Attack in Disguise

Jul 19, 2022 8:16:00 AM By Stu Sjouwerman

The latest iteration in Copyright Claim scams is an evolution of this repeated attack method that has proven to get the attention – and response – of victims over the last few years.

Phishing Kit Imitates PayPal

Jul 18, 2022 10:32:56 AM By Stu Sjouwerman

Researchers at Akamai have discovered a PayPal phishing kit that attempts to steal victims’ identities as well as their financial information. The phishing page looks identical to ...

New Phishing Attacks Shame, Scare Victims into Surrendering Twitter, Discord Credentials

Jul 15, 2022 3:25:55 PM By Stu Sjouwerman

A new wave of social media phishing attacks are now using scare tactics to lure victims into sending their logins.

Ransomware Group Conti Reaches 40 Successful Attacks in a Single Month

Jul 14, 2022 4:27:10 PM By Stu Sjouwerman

In less than 2 years, the most successful ransomware group to date has reached new levels of campaign and individual attack effectiveness, targeting over 160 industries worldwide.

Phishing Attacks are the Most Prevalent Source of Identity-Related Breaches

Jul 14, 2022 4:27:06 PM By Stu Sjouwerman

Cybercriminals almost always need to leverage credentials as part of just about any kind of cyberattack. To no surprise, phishing and social engineering play a dominant role.

Facebook-Themed Scam Aims to Steal Your Credentials

Jul 14, 2022 4:27:03 PM By Stu Sjouwerman

A creative mix of phishing emails, solid social engineering, use of Facebook Messenger, brand and site impersonation, and a sense of urgency all add up to a believable attack.

Hovering Over Links Will Protect You More Than MFA

Jul 14, 2022 3:57:18 PM By Roger Grimes

Microsoft Security recently released a report which detailed a widely successful phishing attack technique used against over 10,000 of its customers…a phishing attack that worked even if ...

Watchdog Uncovers 12% of Google Ads for Student Loan Relief Could be Malicious

Jul 14, 2022 12:02:34 PM By Stu Sjouwerman

You may want to be careful about clicking on a student loan forgiveness ad. The Tech Transparency Project reviewed the top Google searches with 'student loan forgiveness' and found almost ...

QuickBooks Phishing Scam is Back

Jul 14, 2022 8:39:27 AM By Stu Sjouwerman

Scammers are continuing to abuse the QuickBooks tax accounting software to send phishing scams, according to Roger Kay at INKY.

[On-Demand Webinar] Hacks That Bypass Multi-Factor Authentication and How to Make Your MFA Solution Phishing Resistant

Jul 13, 2022 1:17:58 PM By Stu Sjouwerman

The average person believes using Multi-Factor Authentication (MFA) makes them significantly less likely to be hacked. That is simply not true! Hackers can bypass 90-95% of MFA solutions ...

Phishing Attack Steals $8 Million Worth of Cryptocurrency

Jul 13, 2022 9:09:08 AM By Stu Sjouwerman

Scammers stole $8 million worth of Ethereum from users of the Uniswap cryptocurrency exchange, according to Sujith Somraaj at Decrypt. Notably, the attackers relied purely on social ...

KnowBe4’s 2022 Phishing By Industry Benchmarking Report Reveals that 32.4% of Untrained End Users Will Fail a Phishing Test

Jul 13, 2022 7:00:00 AM By Joanna Huisman

Once again, the human layer continues to be the most desirable attack vector for cybercriminals. 2022 marks the 5th year KnowBe4 has analyzed hundreds of millions of elements of data in ...

CyberheistNews Vol 12 #28 [Eye Opener] Lessons Learned From a Big Hotel's Recent Data Breach Caused by Social Engineering

Jul 12, 2022 9:21:14 AM By Stu Sjouwerman

Callback Malware Campaigns Impersonate CrowdStrike and Other Cybersecurity Companies

Jul 11, 2022 3:26:04 PM By Stu Sjouwerman

CrowdStrike sent the following Tech Alert to their customers

All it Takes is “Free” Beer to Steal Your Personal Data

Jul 11, 2022 12:39:21 PM By Stu Sjouwerman

A recent phishing scam impersonating the Heineken beer brand demonstrates how very little effort is needed by scammers to convince victims to give up all kinds of personal information.

Security Awareness Training Blog

View Topics