Credential Stuffing the Financial Services Sector

May 21, 2021 8:54:50 AM By Stu Sjouwerman

Credential stuffing in the financial services industry has risen significantly over the past year, according to Akamai’s latest State of the Internet / Security report. Credential ...

Transparent Tribe Uses Spoofed Domains in Social Engineering Attacks

May 18, 2021 10:29:59 AM By Stu Sjouwerman

Researchers at Cisco Talos warn that the threat actor known as “Transparent Tribe” (also known as APT36 and Mythic Leopard) is using spoofed websites and malicious documents to deliver ...

[NEW PhishER Feature] Flip the Script on Phishing Emails with PhishFlip

May 18, 2021 8:15:00 AM By Stu Sjouwerman

We are excited to announce the availability of PhishFlip™ as part of the PhishER product to all PhishER customers.

FBI Finds Phishing Sites Abusing Search Results and Ads to Steal Banking Credentials

May 13, 2021 8:56:37 AM By Stu Sjouwerman

The US Federal Bureau of Investigation has sent out a private industry notification (PIN) warning that cybercriminals are using search engine ads and search results to spread phishing ...

New QuickBooks-Themed Phishing Attack Seeks to Infect Victims with Dridex Malware

May 12, 2021 8:18:57 AM By Stu Sjouwerman

Purporting to be invoices and payment reminders, this new campaign targets users of the popular accounting software to install the banking trojan on its victims endpoints.

Phishing Scammers Remove ‘External Sender’ Email Warnings Impersonating Internal Users

May 12, 2021 8:18:49 AM By Stu Sjouwerman

With little more than some CSS and HTML coding, a security researcher demonstrates how easy it is to eliminate security warnings placed on email messages by security products.

Your Organization Needs to Take Security Awareness Training More Seriously

May 11, 2021 4:08:50 PM By Roger Grimes

Your organization needs to take security awareness training (SAT) more seriously. I mean truly serious, really serious, and not relegated to some quasi-, semi-serious status that the vast ...

Wine-Themed Phishing Attacks Have Turned Sour During the Pandemic

May 11, 2021 12:45:30 PM By Stu Sjouwerman

Scammers took advantage of people’s desire to order wine online during the pandemic, Decanter reports. Researchers at Recorded Future disclosed in a recent report that wine-related ...

[On-Demand Webinar] A Master Class on IT Security: Roger Grimes Teaches You Phishing Mitigation

May 10, 2021 10:00:00 AM By Stu Sjouwerman

Phishing attacks have come a long way from the spray-and-pray emails of just a few decades ago. Now they’re more targeted, more cunning and more dangerous. And this enormous security gap ...

[NEW FEATURE] AI-Driven Phishing Helps Admins Deliver a Personalized Simulated Phishing Experience to Each User

May 6, 2021 4:50:21 PM By Stu Sjouwerman

We are excited to announce the availability of KnowBe4’s new AI-Driven Phishing feature. The KnowBe4 phishing platform now leverages machine learning to recommend and deliver informed and ...

New IceID Phishing Attack Targets Website Owners Using Image Copyright Infringement as The Hook

May 6, 2021 9:00:16 AM By Stu Sjouwerman

Spotted by the Microsoft 365 Defender Threat Intelligence Team, this new phishing attack threatens legal action to trick victims into installing information-stealing malware.

W-2 Form Office 365 Credential Scam Creatively Uses Typeform Service to Bypass Security Checks

May 6, 2021 8:59:44 AM By Stu Sjouwerman

By creating phishing site pages using an online service for building surveys and forms, scammers figured out an original way to trick users out of their Office 365 credentials.

Cybersecurity Spend Is Now More Than 20% of the Average IT Budget As 91% of Organizations Suffering an Attack had Operations Impacted

May 6, 2021 8:58:25 AM By Stu Sjouwerman

The latest data from the Hiscox Cyber Readiness Report highlights how organizations are experiencing cyber threats and how they are responding to increase their readiness for next time.

Security Awareness Training Blog

Phishing Blog

View Topics

Credential Stuffing the Financial Services Sector

Transparent Tribe Uses Spoofed Domains in Social Engineering Attacks

[NEW PhishER Feature] Flip the Script on Phishing Emails with PhishFlip

FBI Finds Phishing Sites Abusing Search Results and Ads to Steal Banking Credentials

New QuickBooks-Themed Phishing Attack Seeks to Infect Victims with Dridex Malware

Phishing Scammers Remove ‘External Sender’ Email Warnings Impersonating Internal Users

Your Organization Needs to Take Security Awareness Training More Seriously

Wine-Themed Phishing Attacks Have Turned Sour During the Pandemic

[On-Demand Webinar] A Master Class on IT Security: Roger Grimes Teaches You Phishing Mitigation

[NEW FEATURE] AI-Driven Phishing Helps Admins Deliver a Personalized Simulated Phishing Experience to Each User

New IceID Phishing Attack Targets Website Owners Using Image Copyright Infringement as The Hook

W-2 Form Office 365 Credential Scam Creatively Uses Typeform Service to Bypass Security Checks

Cybersecurity Spend Is Now More Than 20% of the Average IT Budget As 91% of Organizations Suffering an Attack had Operations Impacted

[HEADS UP] New Malware Families Found in Phishing Campaign

UK IT Decision Makers Fear Their Remote Workers Put Company Data at Risk for Data Breach

May the 4th Be With You and Your Users!

U.K. Royal Mail-related Phishing Scams Are Up 645%

Why Should We Care About Personal Smishing Attacks?

Scammers Target Rogers Customers With SMS Messages

Researchers Warn of EtterSilent Facilitating Risky Malware Delivery

Search Our Blog

Subscribe To Our Blog

Posts By Topic

Get the latest about social engineering

Subscribe to CyberheistNews

Get the latest about social engineering

Subscribe to CyberheistNews