Researchers Warn of EtterSilent Facilitating Risky Malware Delivery

Apr 29, 2021 10:25:23 AM By Stu Sjouwerman

Cybercriminals are using a new malicious document builder dubbed “EtterSilent,” according to researchers at Intel 471. The builder is used to craft Microsoft Office documents with macros ...

Lazarus Group Uses New Technique to Avoid Detection

Apr 29, 2021 10:25:03 AM By Stu Sjouwerman

North Korea’s Lazarus group is using an interesting method to evade security measures, according to researchers at Malwarebytes. The threat actor is sending phishing emails with malicious ...

Phishing Campaign Abuses Contact Forms

Apr 29, 2021 10:00:00 AM By Stu Sjouwerman

Attackers are abusing websites’ contact forms to send malicious emails to the websites’ owners, according to researchers at Microsoft. The emails contain bogus copyright claims with a ...

Phishing Tactics Help Legitimate Pension Fund to Secure Meetings with Prospective Customers

Apr 28, 2021 8:57:07 AM By Stu Sjouwerman

Security researchers uncover a marketing campaign that takes a page from the cybercriminal phishing handbook to “trick” pensioners to have an introductory call with their fund expert.

COVID-Related Phishing Attacks Return to Mid-Pandemic Heights

Apr 27, 2021 10:00:00 AM By Stu Sjouwerman

New data from Palo Alto Network’s Unit42 provides a wealth of insight into specifically how cybercriminals have leveraged COVID-related theming to ensure a successful phishing attack.

[INFOGRAPHIC] Q1 2021 Report Shows Users are More Savvy to COVID-19 Phishing Scams

Apr 13, 2021 9:30:36 AM By Stu Sjouwerman

KnowBe4's latest quarterly report on top-clicked phishing email subjects is here. These are broken down into three different categories: social media related subjects, general subjects, ...

2021 Phishing Trends Face Alarming Predictions and Will Likely Include Automated Attacks

Apr 13, 2021 8:24:29 AM By Stu Sjouwerman

Researchers at INKY warn that targeted phishing attacks will continue throughout 2021, as some employees return to the office and others continue working from home. They predict that ...

[HEADS UP] DocuSign Issues Alert of Malicious New Hacking Tool

Apr 9, 2021 3:45:57 PM By Stu Sjouwerman

Earlier this week, DocuSign issued an alert that notified users of a new hacking tool. This tool is imitating DocuSign so then the bad guys can drop malware into victims' systems.

Australian Organizations Increase Cyber Security Spend to Nearly A$5B in 2021

Apr 9, 2021 8:34:08 AM By Stu Sjouwerman

The rise in cyberattacks in Australia is seeing its natural result – organisations realizing the need to put more budget focused on cybersecurity, with the largest portion going towards ...

New Phishing Attacks Bypass Secure Email Gateways Using Some Very Creative Methods

Apr 9, 2021 8:33:56 AM By Stu Sjouwerman

Microsoft Security Intelligence warns of phishing attacks being sent from legitimate email addresses and IP ranges, taking advantage of gateway configuration settings to ensure delivery.

Phishing Attacks Using PDF Files Have Skyrocketed

Apr 8, 2021 8:54:33 AM By Stu Sjouwerman

Phishing attacks using PDF files have spiked over the past year, according to researchers at Palo Alto Networks’ Unit 42.

The Growing WeTransfer Phishing Campaign Can Put Your Users at Risk

Apr 7, 2021 8:28:36 AM By Stu Sjouwerman

Researchers at Avanan have observed a phishing campaign that’s impersonating the WeTransfer file-sharing app in an attempt to steal users’ credentials. The email’s subject line states, ...

[HEADS UP] New Phishing Attack With .TXT Attachment Can Steal All Your Secrets

Apr 6, 2021 10:28:13 AM By Stu Sjouwerman

The 360 security blog just came up with an eye opener. Recently, 360 Security Center’s threat monitoring platform has detected a new email phishing attack. This attack uses a ...

UK Users Should Be Aware of Census-Themed Phishing Attacks

Apr 6, 2021 8:20:03 AM By Stu Sjouwerman

Users in the UK should be on the lookout for census-themed phishing attacks, according to Paul Ducklin at Naked Security. Participating in the census is mandatory in the UK, and people ...

Expect More Travel-Related Phishing as the Pandemic Subsides

Apr 5, 2021 8:36:08 AM By Stu Sjouwerman

People need to be wary of travel-related phishing as the pandemic draws to a close, according to Fleming Shi, Chief Technology Officer at Barracuda Networks. On the CyberWire’s Hacking ...

Office 365 Phishing Kits Are Being Used in a New Attack Targeting Execs and Finance

Apr 2, 2021 10:09:14 AM By Stu Sjouwerman

A new highly-targeted phishing campaign is seeking to compromise the online credentials of those with influence within an organization using an Office 365-themed update attack.

Cybercrime Skyrocketed in the US by 55%

Apr 1, 2021 8:58:39 AM By Stu Sjouwerman

According to data released by StockApps, the annual loss from any type of cybercrime in the US reached $4.2 billion in 2020. This turns into billions of dollars lost, and a 55% increase ...

IRS Warns of Phishing for Dot EDU Email Users

Apr 1, 2021 8:43:52 AM By Stu Sjouwerman

The Internal Revenue Service (IRS) has issued an alert warning about a phishing scam targeting university students. A link in the emails leads to a phishing site that asks users to enter ...

Recent Phishing Scams that Managed to Bypass Email Security Filters

Mar 31, 2021 9:47:38 AM By Stu Sjouwerman

Researchers at Armorblox describe several recent phishing scams that managed to bypass email security filters. The first attempted to gain access to users’ Facebook accounts.

There Is No Herd Immunity in the Digital World

Mar 30, 2021 4:31:46 PM By Roger Grimes

When I was first starting off in my career, I wanted to be a doctor. As life often goes, I got waylaid. Wanting to be a doctor turned in an accounting major and CPA certification, quickly ...

Security Awareness Training Blog

Phishing Blog

View Topics