Why Are Insurance Companies Insisting To Pay Ransom For Ransomware Attacks?

Aug 29, 2019 2:12:15 PM By Stu Sjouwerman

This week, ProPublica published a report describing how insurance companies now prefer to fork over hundreds of thousands of dollars / pounds / Euros in ransom to minimize the detriment ...

Financial Phishing Campaigns on the Rise

Aug 29, 2019 7:01:35 AM By Stu Sjouwerman

More than 1900 new potential bank phishing sites were registered in the first half of 2019, according to researchers at NormShield. Based on the increase in new suspicious domains ...

Business Detections of Ransomware Attacks Have Grown by 365%

Aug 28, 2019 3:51:48 PM By Stu Sjouwerman

The latest data from Malwarebyte’s report Cybercrime Tactics and Techniques: Ransomware Retrospective shows businesses are at risk of ransomware attack now more than ever.

MegaCortex Ransomware goes Fully Automated, Putting Enterprises at Risk of Ransoms in the Millions

Aug 28, 2019 3:21:57 PM By Stu Sjouwerman

A new version of MegaCortex has been spotted, upgrading it from a manual, targeted form of ransomware, to one that can be spread and do damage enterprise-wide.

Microsoft, PayPal, and Facebook are the Top Three Impersonated Brands

Aug 28, 2019 6:50:57 AM By Stu Sjouwerman

Back in June, we discussed Vade Secure’s “Phisher’s Favorite” report for Q1 2019, which found that Microsoft had been the most impersonated brand used in phishing attacks for four ...

Even ‘Unsubscribe’ Emails Can Put the Organization at Risk

Aug 26, 2019 8:05:24 AM By Stu Sjouwerman

Social Engineering tactics seek to use any means that’s familiar to the intended victim – and unsubscribing is perceived as being so benign, it may just be the perfect way to fool your ...

U.S. Utilities Face Phishing Attacks Intent on Gaining Remote Access

Aug 26, 2019 8:03:04 AM By Stu Sjouwerman

Last month saw a number of utility sector businesses targeted with spear phishing attacks that utilize a new remote access Trojan (RAT) that provides attackers with admin access.

Georgia Gov. Kemp Orders Cybersecurity Training For State Employees After Crippling Attacks

Aug 24, 2019 8:19:42 AM By Stu Sjouwerman

StateScoop reports: "Citing several recent ransomware attacks at the state and local levels, Georgia Gov. Brian Kemp this week issued an executive order instructing state employees to ...

A State-of-the-Art Spoof (or, Why Turning Your Users Into Grammar Nazis Won't Keep the Bad Guys Out)

Aug 24, 2019 6:59:38 AM By Stu Sjouwerman

By Eric Howes, KnowBe4 Principal Lab Researcher. Malicious actors are becoming very skilled at exploiting popular online services that enjoy the familiarity and trust of millions of ...

Lateral Phishing Affects One in Seven Organizations

Aug 22, 2019 6:58:11 AM By Stu Sjouwerman

A survey by Barracuda found that one in seven organizations experienced lateral phishing attacks over the course of seven months, and that 42% of these attacks were not reported by ...

Is The Ransomware Debate Over? To Pay Or Not To Pay, The Conference Of Mayors Made Up Their Mind

Aug 21, 2019 6:59:56 AM By Stu Sjouwerman

The long-standing argument over whether or not to pay may have come to an end, with a resolution from the U.S. Conference of Mayors calling on cities to not pay up.

Gift Cards Are Now the #1 Business Email Compromise Cash-Out Mechanism for Fraudsters

Aug 20, 2019 5:03:24 PM By Stu Sjouwerman

Overtaking wire transfers and payroll diversion, gift cards have taken a material lead as one of the easiest and least recoverable ways to cash out of a fraud scam.

Game Phishing Scams Steal Steam Accounts

Aug 20, 2019 4:56:43 PM By Stu Sjouwerman

A phishing scam is stealing Steam accounts by promising free games to victims if they log in to a website with their Steam credentials, according to a recent post by BleepingComputer.

[On-Demand Webinar] How to Prevent 81% of Phishing Attacks With DMARC

Aug 20, 2019 3:12:58 PM By Stu Sjouwerman

Only ~20% of companies use DMARC, SPF, and DKIM, global anti-domain-spoofing standards, which could significantly cut down on phishing attacks. But even when they are enabled and your ...

Blank Emails Come Before BEC Fraud Attack

Aug 19, 2019 4:59:03 PM By Stu Sjouwerman

Business email compromise (or CEO fraud) has its reconnaissance phase, too. Researchers at Agari say they’ve found that blank, unsolicited emails are often an early sign that a BEC gang ...

Are Local Government and Municipalities Part of a Coordinated Attack on the U.S.?

Aug 15, 2019 3:17:12 PM By Stu Sjouwerman

There are too many ransomware attacks to ignore the similarities. It’s either government networks are easy prey, or someone is trying to cash out on the U.S., one attack at a time.

Social Engineering Testing is Necessary to Fend off Phishing Attacks

Aug 15, 2019 3:14:23 PM By Stu Sjouwerman

The success of social engineering as part of phishing and spear phishing attacks has caused organizations to realize they need an effective tactic to make employees vigilant.

The Unusual Activity Would be the Warning Itself

Aug 15, 2019 7:01:40 AM By Stu Sjouwerman

BleepingComputer has come across a phishing campaign that’s spoofing “Unusual sign-in” warnings from Microsoft to steal users’ credentials. The emails look nearly identical to Microsoft’s ...

Even when your users don't click...

Aug 14, 2019 10:40:34 AM By Stu Sjouwerman

...they can still be helping the bad guys compromise your organization. Sad but true.

Still Dodging that Sextortion Bullet

Aug 13, 2019 5:27:18 PM By Stu Sjouwerman

It has long been true that sextortionists really had nothing on their intended victims. No video, no screen captures, nothing at all beyond shame and an uneasy conscience. Unfortunately ...

Security Awareness Training Blog

Phishing Blog

View Topics