81% of Organizations Cite Phishing as the Top Security Risk

Feb 8, 2024 8:00:00 AM By Stu Sjouwerman

Organizations are finally dialing in on where they need to focus their cybersecurity strategies, starting with phishing. But the top four cited security risks all have one element in ...

Generative AI Used to Launch Phishing Attacks

Feb 6, 2024 1:38:52 PM By Stu Sjouwerman

Criminal threat actors are increasingly utilizing generative AI tools like ChatGPT to launch social engineering attacks, according to researchers at Check Point.

New Phishing-As-A-Service Kit with Ability to Bypass MFA Targets Microsoft 365 Accounts

Feb 5, 2024 4:57:58 PM By Stu Sjouwerman

A phishing-as-a-service platform called “Greatness” is facilitating phishing attacks against Microsoft 365 accounts, according to researchers at Sucuri.

Microsoft Teams: The New Phishing Battlefront - How Attackers Are Exploiting Trusted Platforms

Feb 1, 2024 1:43:34 PM By Stu Sjouwerman

Attackers are abusing Microsoft Teams to send phishing messages, according to researchers at AT&T Cybersecurity.

[Live Demo] Ridiculously Easy Security Awareness Training and Phishing

Feb 1, 2024 8:00:00 AM By Stu Sjouwerman

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Open Redirects Used to Disguise Phishing Links

Jan 30, 2024 1:52:38 PM By Stu Sjouwerman

Phishing attacks are increasingly using open redirects to evade detection by security filters, according to researchers at Trustwave.

Scammers Use Airdrops to Lure Users With Phony NFTs

Jan 29, 2024 8:42:17 AM By Stu Sjouwerman

Researchers at Check Point warn that scammers are using airdrops to distribute phony non-fungible tokens (NFTs) that direct users to malicious sites.

Bravo Host Andy Cohen Scammed Out of a “Sizable” Amount of Money by Fraudsters Posing as the Bank

Jan 29, 2024 8:41:52 AM By Stu Sjouwerman

Bravo host Andy Cohen tells how he became the victim of an impersonation scam that gave scammers access to control his bank account.

New Evasive Phishing Technique “Legacy URL Reputation Evasion" (LURE)

Jan 25, 2024 8:59:50 AM By Stu Sjouwerman

Researchers at Menlo Security observed a 198% increase in browser-based phishing attacks over the past six months.

Social Engineering Attacks Rising in the Trucking Industry

Jan 25, 2024 8:59:28 AM By Stu Sjouwerman

Spear phishing and voice phishing (vishing) are on the rise in the trucking industry, according to a new report from the National Motor Freight Traffic Association (NMFTA).

Facebook Phishing Scams Target Concerned Friends and Family

Jan 22, 2024 2:06:13 PM By Stu Sjouwerman

BleepingComputer describes a phishing scam that’s been running rampant on Facebook for the past several months, in which threat actors use hacked accounts to post links to phony articles ...

Russian State-Sponsored Threat Actor Targets High Profile Individuals in Phishing Campaign

Jan 22, 2024 2:00:15 PM By Stu Sjouwerman

The Russian state-sponsored threat actor “COLDRIVER” is launching phishing campaigns against “high profile individuals in NGOs, former intelligence and military officers, and NATO ...

Facebook Work-From-Home “Job” Posting Scam Goes the Extra Mile to Trick Victims

Jan 19, 2024 12:50:46 PM By Stu Sjouwerman

A new job posting scam found by IT security company Qualysys is focused on capturing victim’s identity details, accessing victim’s Facebook accounts, and committing fraud. In this new ...

More Than Half of Data Breaches in the U.K.’s Legal Sector are Due to Insider Error

Jan 18, 2024 2:32:22 PM By Stu Sjouwerman

A new analysis of data breaches in the United Kingdom's legal sector shows that organizations need to be looking inward more and look for ways to elevate the security awareness of ...

Ninety-Four Percent of Organizations Sustained Phishing Attacks Last Year

Jan 18, 2024 8:18:57 AM By Stu Sjouwerman

A survey by Egress has found that 94% of organizations were hit by phishing attacks in 2023, Infosecurity Magazine reports. Additionally, 91% of firms experienced data loss and ...

Malicious APKs Drain Bank Accounts

Jan 16, 2024 2:00:08 PM By Stu Sjouwerman

A phishing campaign is targeting Chinese users in an attempt to distribute malicious apps, according to researchers at Palo Alto Networks’s Unit 42.

Cryptocurrency Drainer Distributed Through Phishing

Jan 16, 2024 1:59:42 PM By Stu Sjouwerman

Mandiant has published a report on “CLINKSINK,” a cryptocurrency Drainer-as-a-Service (DaaS) that’s targeting users of the Solana currency.

LinkedIn is Being Used for Dating – It’s a Recipe for Disaster

Jan 16, 2024 10:20:50 AM By Stu Sjouwerman

A new article explains how business professionals are beginning to be not-so-professional and seeking to make personal connections. It’s only a matter of time before cybercriminals jump ...

Analysis of Phishing Emails Shows High Likelihood They Were Written By AI

Jan 15, 2024 10:28:06 AM By Stu Sjouwerman

It’s no longer theoretical; phishing attacks and email scams are leveraging AI-generated content based on testing with anti-AI content solutions.

Women CyberSecurity Society Targeted by Smishing Campaign

Jan 15, 2024 8:23:44 AM By Stu Sjouwerman

The Canada-based Women CyberSecurity Society (WCS2) has warned that its leadership, members, and volunteers are being targeted by an SMS phishing (smishing) campaign, IT World Canada ...

Security Awareness Training Blog

Phishing Blog

View Topics