Students Phished with Bogus Job Offers

Feb 6, 2023 10:14:44 AM By Stu Sjouwerman

A phishing campaign is targeting college students with phony part-time job opportunities, according to Jeremy Fuchs at Avanan. The emails purport to come from the colleges’ job placement ...

Yahoo Suddenly Rises in Popularity in Q4 to Become the Most Impersonated Brand in Phishing Attacks

Feb 2, 2023 4:31:58 PM By Stu Sjouwerman

Completely absent from the top 10 brands for more than two years, Yahoo’s impersonation may indicate that scammers are looking for new attack angles using lesser-used brands.

OneNote Attachments Used as Phish Hooks

Jan 31, 2023 3:04:28 PM By Stu Sjouwerman

Threat actors are using malicious attachments in OneNote in order to distribute malware, BleepingComputer reports. The attackers attach VBS files that instruct the user to double-click on ...

Alert: Refund Scam Targeting Federal Agencies via RMM Software

Jan 30, 2023 8:51:25 AM By Javvad Malik

At least two federal civilian agencies were the unfortunate victims of a refund scam campaign, perpetrated through the use of remote monitoring and management (RMM) software. CISA, the ...

Do Not Get Fooled Twice: Mailchimp's Latest Breach Raises Alarm Bells – Protect Yourself Now!

Jan 25, 2023 1:23:12 PM By Javvad Malik

For the second time in less than a year, Mailchimp has found itself in a precarious situation, having to admit that it has been breached. It appears that a social engineering attack ...

Phishing Campaign Impersonates Japanese Rail Company

Jan 25, 2023 10:49:17 AM By Stu Sjouwerman

Researchers at Safeguard Cyber describe a phishing campaign that’s posing as a Japanese rail ticket reservation company.

2022 Report Confirms Business-Related Phishing Emails Trend [INFOGRAPHIC]

Jan 24, 2023 1:14:53 PM By Stu Sjouwerman

KnowBe4's latest reports on top-clicked phishing email subjects have been released for 2022 and Q4 2022. We analyze 'in the wild' attacks reported via our Phish Alert Button, top subjects ...

New QR Code Phishing Campaign is Impersonating the Chinese Ministry of Finance

Jan 24, 2023 8:36:44 AM By Stu Sjouwerman

Researchers at Fortinet warn that a phishing campaign is impersonating the Chinese Ministry of Finance. The phishing emails contain a document with a QR code that leads to a ...

Ransomware Has SMBs Reprioritizing Their Cybersecurity Spending to Combat Attacks

Jan 20, 2023 9:57:48 AM By Stu Sjouwerman

New data shows that SMBs can clearly see where they have cybersecurity issues and are taking great strides to put their devoted budget to security technology and services that actually ...

The Current State of Cybersecurity Should Fear AI Tools Like ChatGPT

Jan 20, 2023 9:57:35 AM By Stu Sjouwerman

Malicious use of the text-based AI has already begun to be seen in the wild, and speculative ways attackers can use ChatGPT may spell temporary doom for cybersecurity solutions.

Unusual Blank-Image Phishing Attacks Impersonate DocuSign

Jan 20, 2023 8:59:19 AM By Stu Sjouwerman

An unusual phishing technique has surfaced this week. Avanan, a Check Point Software company, released a blog Thursday morning detailing a new attack in which hackers hide malicious ...

Phishing For Industrial Control Systems

Jan 19, 2023 8:42:58 AM By Stu Sjouwerman

Mandiant has published a report describing phishing emails that have breached organizations in the industrial sector. Mandiant explains that the majority of phishing attacks are ...

The Amazing Thing Is that DHL Phishing Campaigns STILL Work

Jan 18, 2023 2:23:24 PM By Stu Sjouwerman

Researchers at Armorblox warn that a phishing campaign is impersonating DHL with fake shipping invoices.

Spear Phishing Campaign Targets Southeast Asia

Jan 17, 2023 8:52:07 AM By Stu Sjouwerman

Researchers at Group-IB are tracking a previously unknown threat actor dubbed “Dark Pink” that’s using spear phishing attacks to target government, military, and religious organizations. ...

[Heads Up] Phishing Attacks Are Now The Top Vector For Ransomware Delivery

Jan 13, 2023 6:57:21 AM By Stu Sjouwerman

Phishing attacks are now the top vector for ransomware delivery, according to researchers at Digital Defense. Phishing emails can be highly tailored to specific employees in order to ...

Government Workers as Phishing Targets

Jan 12, 2023 8:56:34 AM By Stu Sjouwerman

Government workers are prime targets for social engineering attacks, according to Kaitlyn Levinson at GCN. Attackers use different tactics to target government employees in specific ...

Italian Cybercriminal Pleads Guilty to Phishing for Book Manuscripts

Jan 11, 2023 9:28:06 AM By Stu Sjouwerman

An Italian citizen named Filippo Bernardini has pleaded guilty in New York to stealing more than a thousand unpublished book manuscripts from various well-known authors. The targeted ...

Phishing in the Service of Espionage

Jan 9, 2023 9:14:12 AM By Stu Sjouwerman

Reuters describes a cyberespionage campaign carried out by the hitherto little-known threat group researchers track as "Cold River." The group is circumstantially but convincingly linked ...

Phishing Campaigns Impersonate the UK Government

Jan 5, 2023 8:34:42 AM By Stu Sjouwerman

The UK’s National Cyber Security Centre (NCSC) has outlined the top six most impersonated UK government agencies in 2022. The most impersonated entity was the National Health Service ...

Using AI Large Language Models to Craft Phishing Campaigns

Jan 4, 2023 8:41:49 AM By Stu Sjouwerman

Researchers at Check Point have shown that Large Language Models (LLMs) like OpenAI’s ChatGPT can be used to generate entire infection chains, beginning with a spear phishing email. The ...

Security Awareness Training Blog

Phishing Blog

View Topics