Security Awareness Training Blog

Scam Of The Week Blog

Every week we report on the top scams making headlines in the cybersecurity world. Share with your users so they stay up to date on what to watch out for!

Scam Of The Week: Microsoft OneNote Audio Note Phishing Emails

Phishing scammers are coming up with more innovative methods to convince their targets to provide login credentials. Such is the case with a new OneNote Audio Note phishing campaign that ...
Continue Reading

Scam Of The Week: "When Users Add Their Names to a Wall of Shame"

Eric Howes, KnowBe4 Principal Lab Researcher, found out about another insidious bad guy trick: "If you work in IT there has undoubtedly come a dark moment when you wondered to yourself ...
Continue Reading

Scam Of The Week: Cryptocurrency On Twitter

The recent rash of cryptocurrency scams on Twitter show organizations that social media is there to share posts and can’t protect platform users.
Continue Reading

Scam Of The Week: Sextortion With A RATty Twist

Sextortion is a form of blackmail where the extortionist claims to have photos or video of the victim watching adult entertainment on their computer. The criminal threatens to send the ...
Continue Reading

SCAM OF THE WEEK: "The Boss Needs iTunes Gift Cards For Customers... NOW"

If you ever wondered if those iTunes gift card phishes really work, see the below email exchange.
Continue Reading

Scam Of The Week: SharePoint Phishing Attack On Office 365 Users

The attack dubbed “PhishPoint” by Cloud Security vendor Avanan demonstrates the craftiness and extent cybercriminals will go to in order to harvest Office 365 credentials.
Continue Reading

Fake Hotel Website Scams Target Travelers and Hotels

Cybercriminals will take advantage of any situation that separates people from their money. And what better way than to purport to be a reputable hotel and take reservations?
Continue Reading

Scam Of The Week: *Another* New CEO Fraud Phishing Wrinkle

So, here's a new CEO Fraud phish: see these fresh screen shots from emails reported to us through the free KnowBe4 Phish Alert Button. Bad guys spoof the managing partner and CPA and an ...
Continue Reading

[Scam Of The Week] Amazon Prime Day Is Only 4 days away

It's a prime opportunity for the bad guys to send a raft of phishing attacks. We do have a "Free Amazon Prime Account" template that we just modified to fit a Prime Day-style scam. It's ...
Continue Reading

Scam of The Week: Celebrity Deaths Kate Spade and Anthony Bourdain

Two celebrities committed suicide this week, and unfortunately that's going to be exploited by lowlife internet criminals in a variety of ways.
Continue Reading

Scam Of The Week: GDPR Phishing Attack With Apple Flavor / Royal Wedding

Social engineering follows seasonal patterns. It's also connected to major events. We see this every year with holiday-themed phishing attacks between Thanksgiving and New Year's Day.
Continue Reading

Scam Of The Week: Phishing Attack Uses GDPR As Bait

Attackers know that companies are sending a lot of emails to customers about GDPR—and that makes them prime opportunity for phishing attacks. With the looming GDPR May 25 deadline almost ...
Continue Reading

Scam Of The Week: 150 Million Under Armour MyFitnessPal Users Are Now Phishing Targets

BREAKING NEWS: Under Armour's health- and fitness-tracking app, MyFitnessPal, has been hit by a data breach. Roughly 150 million MyFitnessPal users are affected, Under Armour says. Under ...
Continue Reading

Scam Of The Week: Lowlife Scum Exploits Recent Florida Parkland School Shooting

Just when you think they cannot sink any lower, criminal internet scum are now exploiting the Parkland tragedy in Florida. Unfortunately, from this spot I have been warning about these ...
Continue Reading

Scam Of The Week: The Most Sophisticated Netflix Phishing Yet

This Netflix phishing campaign goes after your login, credit card, mugshot and ID! Paul Ducklin at Sophos wrote: "Think of the big security stories of recent months. Security holes like ...
Continue Reading

Scam Of The Week: Fake Meltdown And Spectre Patch Phishing Emails

We sent out some warnings and advisories last week about Spectre and Meltdown, but we want to remind everyone again about some steps you can take to protect yourself. Remember that the ...
Continue Reading

Scam Of The Week: New Massive Data Breach Poses Major Threat

Here’s a fun question to pose to the family dinner table: Have you ever heard of Alteryx? 100 to 1 you never heard of them, but chances are good that they have heard of you. Alteryx is a ...
Continue Reading

Scam Of The Week: Phishers Target PayPal Users With Fake “Failed Transaction” Emails

Scammers are pushing out fake PayPal emails that use the premise of an unverified transaction to phish for customers’ personal and financial information. With the end-of-the-year holidays ...
Continue Reading

Scam of the Week: "Cyber Monday Is Scammer Heaven"

The majority of consumers aware of online phishing scams, but still may fall victim this cyber Monday... So here is your Scam Of The Week! DomainTools, a leader in domain name and ...
Continue Reading

Scam Of The Week: Massive Netflix Phishing Campaign

There is a massive scam campaign going on, this time a very well executed Netflix phishing attack. The scam targets subscribers telling them that their account is about to be canceled. ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews