Human Risk Management Blog

Security Awareness Training

Read the latest news about security awareness training, best practices, why you need it, and what happens when you don't have it in place.

[Heads-up] We Give Notice About The New Criminal Age 'Ransomware 2.0': Extremely Damaging, Dangerous And Plain Evil

Take a look at that screen. Let it sink in a moment. Imagine if it were your company.

[Heads-up] Scam Of The Week: Coronavirus Phishing Attacks In The Wild

Yup, you can count on it, when there is a worldwide health scare, the bad guys are on it like flies on $#!+. We are seeing a new malicious phishing campaign that is based on the fear of ...

Are You Expecting a Special Invitation?

According to MailGuard, a few days ago an email from our Prime Minister Scott Morrison started to do the rounds.

[Heads-up] It's OK To Just Say No To Phone Scams

Earlier this week a credit union located in the Midwest United States alerted its members via email to a pair of phone-and-text-based scams designed to trick unwitting users into coughing ...

9-Month Compromise of Wawa Results in Data Breach of More Than 30 Million Credit Cards

The breach, discovered in December of last year, is suspected to have led to the theft of and subsequent and sale of one of the largest takes of customer credit card data on the dark web.

Phishing Attacks Target Telecom Companies and their Tools to Facilitate SIM Swapping Attacks

Hackers are phishing telecom workers and “authorized retailers” to steal credentials and gain access to internal company tools. The end game is to modify SIM settings to help with a ...

It's the Access, Not the Technology

Exercising a suitable level of operational security is the key to protecting yourself from the consequences of sophisticated cyber attacks, according to Lionel Laurent at Bloomberg. ...

Phishing Telcos for SIM-Swapping

Motherboard reports that SIM swappers are launching phishing attacks against employees at Verizon, T-Mobile, and Sprint in order to hijack customer service tools. Once they have access to ...

‘Ryuk Stealer’ Searches for and Steals Confidential Files from Government, Military, and Law Enforcement

The newest strain of Ryuk ransomware has added new keywords and filetypes to expand its ability to find files with content that can be turned into money through sale, extortion, or ransom.

Latest Ryuk Ransomware Attacks on Oil and Gas Companies Includes Compromising Active Directory

Ransomware has definitely grown up from its infant stages where it simply infected one computer. From spreading through lateral movement, to the use of a victim's email to spread the ...

A Look Inside the Phishing Tackle Shop

The sophisticated 16Shop phishing kit can now target PayPal and American Express users, according to researchers from ZeroFOX. The researchers came across a new version of 16Shop that ...

Is There Still Hope for Privacy?

January 28 is Data Privacy Day. In honor of that, I’d like to share some random thoughts on privacy that I put together for a recent webcast with StaySafeOnline.org. And when I say, ...

New Malware Upgrade Steals Browser and Email Client Credentials

Nothing is safe anymore. While tricking users into giving up their credentials still seems pretty impressive, new updates to the FTCode ransomware target the IDs and passwords on your ...

Cyber-Insurance Premiums Jump as High as 25% and May Now Require Co-Insurance

With enough claims under the belts of insurance companies covering data ransoms, data theft, and other types of cyberattack, the risk appears to be shifting somewhat back to the ...

Contributing to the Delinquency of a Major

A Swedish man used a multitude of forged credentials and a fake school diploma to join the Swedish military, where he maintained the ruse for eighteen years and eventually attained the ...

Scam Of The Week: "Kobe Bryant Dead, Dies in Helicopter Crash"

Today, news broke that Kobe Bryant died in a helicopter crash. His daughter Gigi was also on board and died in the crash. This is a celebrity death that the bad guys are going to be ...

[Heads-up] Will Proposed New Laws *Ban* Making Ransomware Payments?

The ransomware scourge has become much worse the last 12 months. Highly organized cybercrime gangs have iterated their attacks into a massive extortion racket.

Ransomware Costs Double as Attacks Increase in Downtime and Sophistication

With payouts as much as $780,000, new data shows ransomware threat actors are going after every sized organization doing more damage and asking for more money.

New EFS Ransomware Attack Uses Windows Encrypting File System Against Itself

The newly-spotted form of ransomware takes advantage of encryption capabilities built into Windows making it difficult for AV vendors to stop it.


Get the latest insights, trends and security news. Subscribe to CyberheistNews.