Scam Of The Week: Phishing Attack Uses GDPR As Bait

May 5, 2018 10:40:16 AM By Stu Sjouwerman

Attackers know that companies are sending a lot of emails to customers about GDPR—and that makes them prime opportunity for phishing attacks. With the looming GDPR May 25 deadline almost ...

Q1 2018 Top Clicked Phishing Email Subjects [INFOGRAPHIC]

May 4, 2018 5:05:27 PM By Stu Sjouwerman

This is the second year we've published quarterly results of the most-clicked phishing email subjects across a few categories. We separate the data into subjects related to social media ...

Chinese Cyber Spies Focus On Spear Phishing... YOU!

May 4, 2018 4:43:32 PM By Stu Sjouwerman

Catalin Cimpanu at Bleepingcomputer reported: "Chinese cyber spies are evolving their tactics, focusing on IT staffers, relying more and more on spear phishing instead of malware, and ...

Cylance: "Phishing and drive-by downloads lead infection methods."

May 2, 2018 10:30:46 AM By Stu Sjouwerman

The most common infection vectors are still email phishing and drive-by downloads according to the latest threat report from AI security specialist Cylance. The report provides a ...

Gone Phishing: Travelers Claims Plan Doesn’t Cover Cyber Losses

May 1, 2018 5:14:19 PM By Stu Sjouwerman

Daniel R. Stoller at Bloomberg Law had an excellent observation about the risks of phishing related to general crime policies. Here is a short excerpt and the whole article is warmly ...

"It can't hurt to open one little attachment, can it?"

May 1, 2018 4:49:48 PM By Stu Sjouwerman

Brad Haan sent me this riot cartoon:

PhishLabs Reports That Credential Phishing Has Shifted To The Enterprise

May 1, 2018 10:23:34 AM By Stu Sjouwerman

Why is credentials phishing moving from consumers to the enterprise, just like ransomware has done in the last 2 years? The answer might surprise you. Elliot Volkman at the PhishLabs ...

Phishing threats still dwarf vulnerabilities and zero-days

Apr 30, 2018 4:13:16 PM By Stu Sjouwerman

Rob Wright at SearchSecurity wrote: "Proofpoint research shows that while phishing attacks now require victims to take more steps, the success rate for such attacks hasn't declined and ...

Gone Phishing: Employer Faces Liability for Mistakenly Disclosing W-2 Forms to Scammer

Apr 30, 2018 7:05:00 AM By Stu Sjouwerman

Attorneys Zuckerman Spaeder noted on JDSUPRA: "When employers are caught off guard, they can face not only the loss of their own assets, but also liability to their employees. For ...

Scam Of The Week: World's Largest Phishing Botnet Grows Evasive

Apr 28, 2018 11:01:06 AM By Stu Sjouwerman

The notorious Necurs botnet is one of the oldest and largest spam and phishing delivery systems in existence. It controls millions of machines that the criminal botmasters use to send ...

Researchers discover next generation phishing kit

Apr 26, 2018 1:22:10 PM By Stu Sjouwerman

Researchers at Check Point and CyberInt, have discovered a new generation of phishing kit that is readily available on the Dark Web. The new kit, compiled and offered by a criminal whose ...

Mysterious “double kill” Word/IE zero-day allegedly in the wild as phishing attack

Apr 25, 2018 6:40:16 AM By Stu Sjouwerman

“Double kill” is a bragging term from the world of violent video gaming – it means you finished off two assailants with a single shot. In the world of cybercrime, it’s the name given by ...

[NEW WHITEPAPER] 10 Best Practices for Protecting Against Phishing, Ransomware and Email Fraud

Apr 14, 2018 11:12:25 AM By Stu Sjouwerman

Organizations have been victimized by a wide range of threats and exploits, most notably phishing attacks that have penetrated corporate defenses, targeted email attacks launched from ...

Ransomware, Phishing, and Pretexting in the Annual Verizon Databreach Report

Apr 14, 2018 10:44:37 AM By Stu Sjouwerman

Did you know, 43% of breaches result from social engineering attacks? What's more, according to a recent Verizon investigation, phishing emails account for 98% of all social engineering ...

[Heads-Up] Phishing Scam Of The Week: Bad Guys Go Nuclear

Apr 12, 2018 7:28:18 AM By Stu Sjouwerman

So, this one is the next new criminal low. This particular phish spoofs a campus-wide security alert for a community college (confidential information blocked out) in Florida. Given that ...

Major uptick in mobile phishing URL click rate

Apr 10, 2018 11:53:58 AM By Stu Sjouwerman

In a study of Lookout users, more than half clicked mobile phishing URLs that bypassed existing security controls. Since 2011, Lookout has observed this mobile phishing URL click rate ...

Phishing Tops IRS List of Tax-Related Scams for 2018

Apr 7, 2018 6:15:05 PM By Stu Sjouwerman

Michael Trimarchi at the Bloomberg Bureau of National Affairs wrote an excellent article about the continued risk of phishing, as reported by the IRS: "The stealing of personal ...

Scam Of The Week: Fiendishly Clever Gmail Phishing Scam You Need To Know About

Apr 6, 2018 11:28:53 AM By Stu Sjouwerman

Twitter user @_thp shared a recent phishing scam that they received; and it’s so fiendishly clever that it’s gone viral. They wrote: "This is the most clever phishing scam I've ever ...

SAM.Gov Hackers Were Handed Spear Phishing, Spoofing & Credential Theft On A Gold Platter

Mar 31, 2018 6:49:45 PM By Stu Sjouwerman

Cybercrooks who stole federal payments by hacking contractor accounts on a GSA website used sophisticated spear phishing techniques to steal login credentials and then diverted payments ...

SAM.gov hackers used spear phishing, email spoofing and credential theft

Mar 30, 2018 10:54:29 AM By Stu Sjouwerman