Unprecedented Rise of Malvertising as a Precursor to Ransomware

Feb 8, 2024 8:00:00 AM By Stu Sjouwerman

Cybercriminals increasingly used malvertising to gain initial access to victims’ networks in 2023, according to Malwarebytes’s latest State of Malware report.

81% of Organizations Cite Phishing as the Top Security Risk

Feb 8, 2024 8:00:00 AM By Stu Sjouwerman

Organizations are finally dialing in on where they need to focus their cybersecurity strategies, starting with phishing. But the top four cited security risks all have one element in ...

Generative AI Used to Launch Phishing Attacks

Feb 6, 2024 1:38:52 PM By Stu Sjouwerman

Criminal threat actors are increasingly utilizing generative AI tools like ChatGPT to launch social engineering attacks, according to researchers at Check Point.

Fake “I Can’t Believe He’s Gone” Posts Seek to Steal Facebook Credentials

Feb 5, 2024 4:58:17 PM By Stu Sjouwerman

A new scam relies on a victim's sense of curiosity, brand impersonation, and the hopes of a new login to compromise Facebook credentials.

New Phishing-As-A-Service Kit with Ability to Bypass MFA Targets Microsoft 365 Accounts

Feb 5, 2024 4:57:58 PM By Stu Sjouwerman

A phishing-as-a-service platform called “Greatness” is facilitating phishing attacks against Microsoft 365 accounts, according to researchers at Sucuri.

Vendor Email Compromise Attacks Against Financial Services Surge 137% Last Year

Feb 2, 2024 1:27:13 PM By Stu Sjouwerman

Analysis of 2023 attacks shows how the financial services industry had a very bad year, with increases in both vendor email compromise (VEC) and business email compromise (BEC) attacks, ...

Microsoft Teams: The New Phishing Battlefront - How Attackers Are Exploiting Trusted Platforms

Feb 1, 2024 1:43:34 PM By Stu Sjouwerman

Attackers are abusing Microsoft Teams to send phishing messages, according to researchers at AT&T Cybersecurity.

81% of Underwriters Expect Cyber Insurance Premiums to Increase as Risk is Expected to Soar

Feb 1, 2024 1:43:29 PM By Stu Sjouwerman

New data from cyber insurance underwriters shows what they think the biggest threats will be in 2024 and what organizations should do about it.

Ransomware Payments On The Decline As Cyber Attackers Focus on The Smallest, And Largest, Organizations

Jan 31, 2024 1:52:23 PM By Stu Sjouwerman

New data for Q4 of 2023 reveals a sizable shift in the cyber threat landscape, with serious implications regarding ransomware and social engineering attacks targeting both the largest and ...

FBI Cyber Alert: Tech Support Scams Steal Cash or Precious Metals

Jan 31, 2024 1:52:13 PM By Stu Sjouwerman

The US Federal Bureau of Investigation (FBI) has issued an alert that scammers are tricking victims into converting their savings into cash or precious metals, then sending couriers to ...

The Percentage of Organizations Globally Struck by Ransomware Hits an All-Time High

Jan 30, 2024 1:52:43 PM By Stu Sjouwerman

Check Point’s review of ransomware shows that the percent of organizations worldwide hit by this greatest of cyberthreats rose by a whopping 33% in 2023.

Open Redirects Used to Disguise Phishing Links

Jan 30, 2024 1:52:38 PM By Stu Sjouwerman

Phishing attacks are increasingly using open redirects to evade detection by security filters, according to researchers at Trustwave.

Forget Deepfake Audio and Video. Now There’s AI-Based Handwriting!

Jan 29, 2024 2:47:56 PM By Stu Sjouwerman

Researchers have developed AI technology that can mimic someone’s handwriting with only a few paragraphs of written content. Experts worry about the possibility of misuse.

Malvertising Targets Chinese-Speaking Users

Jan 29, 2024 2:47:47 PM By Stu Sjouwerman

Researchers at Malwarebytes warn that a malvertising campaign is targeting Chinese-speaking users with phony ads for encrypted messaging apps. The ads impersonate apps that are restricted ...

Scammers Use Airdrops to Lure Users With Phony NFTs

Jan 29, 2024 8:42:17 AM By Stu Sjouwerman

Researchers at Check Point warn that scammers are using airdrops to distribute phony non-fungible tokens (NFTs) that direct users to malicious sites.

Bravo Host Andy Cohen Scammed Out of a “Sizable” Amount of Money by Fraudsters Posing as the Bank

Jan 29, 2024 8:41:52 AM By Stu Sjouwerman

Bravo host Andy Cohen tells how he became the victim of an impersonation scam that gave scammers access to control his bank account.

The Number of Ransomware Attack Victims Surge in 2023 to over 4000

Jan 25, 2024 12:43:48 PM By Stu Sjouwerman

The surge in Ransomware-as-a-Service affiliates is likely the reason behind the dramatic increase in the number of victimized organizations, with all indicators suggesting that this trend ...

New Evasive Phishing Technique “Legacy URL Reputation Evasion" (LURE)

Jan 25, 2024 8:59:50 AM By Stu Sjouwerman

Researchers at Menlo Security observed a 198% increase in browser-based phishing attacks over the past six months.

Social Engineering Attacks Rising in the Trucking Industry

Jan 25, 2024 8:59:28 AM By Stu Sjouwerman

Spear phishing and voice phishing (vishing) are on the rise in the trucking industry, according to a new report from the National Motor Freight Traffic Association (NMFTA).

New Deepfake Video Scam has “Taylor Swift” Offering Free French Cookware

Jan 25, 2024 8:59:23 AM By Stu Sjouwerman

A new wave of ads utilizing video of well-known celebrities seemingly promoting video games, fake giveaways, and more are starting to popup, and fans are falling for this trap.

Security Awareness Training Blog

View Topics