Human Risk Management Blog

Phishing

Learn about current phishing techniques, notable campaigns and attacks, what to watch out for 'in the wild', and more.

Scam Of The Week: Phishing Madness!

Beware of March Madness, criminal hackers are at it again, after Valentine's Day their phishing agenda has moved to the next topic. They are now spoofing popular March Madness websites, ...

Phishing Is Culprit Behind Vast Majority of Data Exfiltration, Intelligence Official Says

Phil Goldstein at FedTech magazine had some concerning news. "A top federal counterintelligence official says agencies must do more to harden their cybersecurity defenses, even if that ...

FTC Study: Millennials Are The Biggest Victims Of Social Engineering

A report from the FTC found that 40% of adults age 20-29 lost money to fraud, while only 18% of adults over the age of 70 did so, challenging the narrative of older adults falling victim ...

[ALERT] A Really Difficult Phishing Scenario That's Very Hard To Beat

I was alerted by a customer about a really difficult scenario that’s becoming all the more frequent. While there’s probably little that can be done in terms of tuning your spam filters ...

Phishing Via Social Media Up 100 Percent

Fabian Libeau at InformationSecurityBuzz wrote: "The most interesting trend to surface in Q4 of RiskIQ’s phishing report was a 100 percent increase in phishing campaigns leveraging social ...

New Phishing Security Test - See How You Compare to Peers in Your Industry!

We've got something really cool for you: the new Phishing Security Test v3.0!

W-2 information of Scottsboro City Schools employees compromised in phishing incident

SCOTTSBORO, Ala. - The information of Scottsboro City Schools employees became compromised after a phishing scam hit the payroll department. The superintendent issued a letter addressed ...

FBI Warns of Spike in W2 Phishing But Two Central Texas Employers Fall For The Scam

The FBI has joined the IRS in warning that W2 tax form phishing is on the rise. The US tax filing deadline is now less than a month-and-a-half away, and tax-themed phishing is trending ...

UK University Students Lose £100,000 to Phishing

Phishing technique aided by social engineering in the form of using social channels to friend victims and create fake events to get creds. UK university students have been conned out of ...

Almost One Quarter Of Canadians Have Clicked On A Phishing Link

TORONTO, March 1, 2018 /CNW/ - Online payment fraud like phishing is a growing trend, and Canadians are worried about it. According to a new survey conducted by Interac Corp., Canadians ...

Financial phishing accounts for over 50% of all phishing attacks for the first time

In 2017 Kaspersky Lab’s anti-phishing technologies detected over 246 million user attempts to visit different kinds of phishing pages. Of those, over 53 per cent were attempts to visit a ...

Organizations Are Failing To Learn From Phishing And Ransomware Attacks

Warwick Ashford, security editor at ComputerWeekly had an interesting observation after reading CyberArk's latest cyber threat report: "Organisations are failing to learn from cyber ...

Which phishing messages have a near 100% click rate?

Zeljika at HelpnetSecurity had a great summary of Wombat's latest State of the Phish report: "Training employees to spot phishing emails, messages and phone calls can’t be done just once ...

PHISHING SCHEMES NET HACKERS MILLIONS OF DOLLARS FROM FORTUNE 500

IBM has uncovered sophisticated CEO Fraud campaigns—aka Business Email Compromise—which are successfully targeting Fortune 500 companies. On Wednesday, researchers from IBM's X-Force ...

Cryptojacking Scripts And Phishing Pages Could Soon Invade Your Word Documents

Let's open that doc file and watch the Matrix again. Catalin Cimpanu at Bleepingcomputer had the scoop on this concerning news: "Cryptojacking scripts that mine Monero via JavaScript code ...

Edward Snowden returns to U.S.! Oops, nope, it's a phishing scam

Bradley Barth at SCMedia nailed it when he wrote: "No, NSA whistleblower and U.S. fugitive Edward Snowden did not just purchase a 2 terabyte storage plan for iCloud, nor has he moved back ...

Trusted Sites Often Deliver Phishing Attacks: Study

Ray Schultz at MediaPost had a great summary of some troublesome news: "Some of the world’s most popular websites are also the most dangerous when in comes to phishing attacks, according ...

New Multi-Stage Word Phishing Attack Infects Users Without Using Macros

Spam distributors are using a new technique to infect users with malware, and while this phishing attack relies on having users open Word documents, it does not involve social engineering ...

Lazarus Hacking Group back with new phishing campaign targeting banks and bitcoin users

The North Korean Lazarus Hacking Group, suspected to be behind the WannaCry ransomware attack last year, has returned with a new crime spree, this time targeting financial institutions ...

KnowBe4 Attains SOC 2 Type I Compliance For The Hosted Phishing And Training Product Offerings

KnowBe4, Inc, the world's largest security awareness training and simulated phishing platform, this week announced it has successfully completed a Service Organization Controls (SOC) 2 ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.