New Scam Impersonates QuickBooks to Steal Credentials, Extract Money

Sep 15, 2023 10:20:14 AM By Stu Sjouwerman

Establishing urgency through a false need to “upgrade” or lose services, this new attack takes advantage of the widespread use of the popular accounting app to attract victims.

Microsoft (Once Again) Tops the List of Most Impersonated Brands in 2023

Sep 15, 2023 10:19:58 AM By Stu Sjouwerman

Out of the over 350 brands regularly impersonated in phishing attacks, Microsoft continues to stand out because they provide attackers with one unique advantage over other brands.

Board Members' Lack of Security Awareness Puts Businesses at Risk of Cyber Attacks, Finds Savanti Report

Sep 15, 2023 10:19:45 AM By Stu Sjouwerman

A report from cybersecurity consultancy Savanti reveals that board members are facing challenges in understanding cyber risks, and this has important implications for businesses.

AP Stylebook Data Breach Compromises Customer Personal Information

Sep 12, 2023 2:32:48 PM By Stu Sjouwerman

The Associated Press (AP) has disclosed a data breach affecting the legacy AP Stylebook website that led to phishing attacks against impacted customers, BleepingComputer reports.

CyberheistNews Vol 13 #37 Scary New IT Admin Attack Exposes Your MFA Weakness

Sep 12, 2023 9:00:00 AM By Stu Sjouwerman

Microsoft Teams Phishing Campaign Distributes DarkGate Malware

Sep 11, 2023 8:55:42 AM By Stu Sjouwerman

Researchers at Truesec are tracking a phishing campaign that’s distributing the DarkGate Loader malware via external Microsoft Teams messages.

New Telekopye Phishing Toolkit Uses Telegram-Based Bots To Turn Novice Scammers into Experts

Sep 8, 2023 8:13:13 AM By Stu Sjouwerman

The Telekopye toolkit allows scammers to create phishing websites, send fraudulent SMS messages and emails, and target popular Russian and non-Russian online marketplaces.

Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication Methods

Sep 8, 2023 8:00:00 AM By Stu Sjouwerman

Inadequate authentication measures leave your digital identity vulnerable to cybercriminals. Tools like multi-factor authentication, biometrics, passwords, PINs and tokens are more ...

CISA Says to Exercise Caution For Disaster-Related Malicious Scams

Sep 6, 2023 9:45:36 AM By Stu Sjouwerman

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that scammers are exploiting the recent hurricanes that have hit the US. Criminals frequently impersonate ...

CyberheistNews Vol 13 #36 [Must Know] Top 10 Trends in Business Email Compromise for 2023

Sep 6, 2023 9:00:00 AM By Stu Sjouwerman

Nearly One-Quarter of Financial-Themed Spam Emails are Phishing Attacks

Sep 1, 2023 10:23:14 AM By Stu Sjouwerman

While spam tends to be dismissed as being more of an annoyance, new research shows that there is a very real and ever-present threat in emails that are marked as “spam”.

Cyberattacks Targeting Government Agencies and Institutions Increases in Q2 by 40%

Sep 1, 2023 10:22:53 AM By Stu Sjouwerman

New data shows a massive uptick in attacks across all industries, but a particularly worrisome growth in interest in targeting the public sector – and the indicators of who’s responsible ...

New “Early Warning” System in the U.K. Tips Off Ransomware Targets

Sep 1, 2023 10:21:59 AM By Stu Sjouwerman

British Intelligence has come up with a potentially very effective means to disrupt ransomware attacks, but there seems to still be a few kinks in the system.

CyberheistNews Vol 13 #35 New KnowBe4 Callback Phishing Feature Boosts Your Users' Security Awareness

Aug 29, 2023 9:00:00 AM By Stu Sjouwerman

CyberheistNews Vol 13 #34 [Must Know] Cybercriminals May Already Have Hacked Your LinkedIn Account. How to Secure.

Aug 22, 2023 9:00:00 AM By Stu Sjouwerman

[Must Know] Cybercriminals May Already Have Hacked Your LinkedIn Account. How To Secure.

Aug 16, 2023 2:00:41 PM By Stu Sjouwerman

New reports show many LinkedIn users have reported complaints about accounts being taken over by bad actors.

CyberheistNews Vol 13 #33 [INFOGRAPHIC] Uncovered: Top-Clicked Q2 Phishing Tests Are from Your HR

Aug 15, 2023 9:00:00 AM By Stu Sjouwerman

Record ¥3 bil stolen via phishing in Japan in 1st half of 2023

Aug 9, 2023 3:17:32 PM By Stu Sjouwerman

A record 2,322 scams in Japan to steal internet banking IDs and passwords have resulted in unauthorized money transfers totaling a record of around 3 billion yen ($21 million) in the ...

CyberheistNews Vol 13 #32 [HEADS UP] Google's Huge Inactive Account Deletion - What You Need to Know

Aug 8, 2023 9:00:00 AM By Stu Sjouwerman

Fraud Masquerades as Anti-Fraud

Aug 7, 2023 9:54:59 AM By Stu Sjouwerman

Many of us have received a phone call or other notification from a credit card company telling us that they’ve detected suspicious activity on our card. Was it us? Did we just spend $500 ...

Security Awareness Training Blog

Cybercrime Blog

View Topics