You Can’t Always Trust a Dot-Gov Domain

Dec 2, 2019 7:12:15 AM By Stu Sjouwerman

It may be easier than one thinks to register a dot-gov domain, according to KrebsOnSecurity. People have tended to regard urls with the top-level domain dot gov as generally reliable, but ...

Over Half of SMBs Experience Phishing and Social Engineering Attacks

Dec 2, 2019 7:00:00 AM By Stu Sjouwerman

The assertion that SMBs aren’t a cyber-target is officially dead. SMBs are victims of the very same attacks as enterprises in growing numbers, according to new research.

Insurers Get Serious About Social Engineering Attacks Citing a Lack of Awareness as the Problem

Dec 2, 2019 7:00:00 AM By Stu Sjouwerman

With specific endorsements to protect against social engineering scams, insurers are realizing where the true risk lies in cyberattacks and make recommendations of how to mitigate it.

Merchant fined for failing to train employees — Former NYDFS Superintendent Vullo Talks About Cybersecurity Regs

Nov 30, 2019 1:09:56 PM By Stu Sjouwerman

Mark Harrop, Director of Communications, Corporates at Thomson Reuters made me aware of a very interesting interview with Maria Vullo, the former Superintendent of New York’s Department ...

Phishing scams on the up in the Netherlands

Nov 30, 2019 12:30:08 PM By Stu Sjouwerman

Mina Solanki, an expat in Holland wrote: "After years of declining, phishing is on the up. In 2018, the (monetary) damage caused by it had almost quadrupled compared to previous years. ...

The Top Lesson From The Recent Louisiana 2,000-server Ransomware Infection: "User Education, User Education, User Education"

Nov 29, 2019 11:57:37 AM By Stu Sjouwerman

Louisiana suffered a ransomware attack last week that took down more than two thousand of the state’s computers and servers. The ransomware apparently entered the network after a user ...

Google Sent 12K Nation-State Phishing Warnings In Three Months

Nov 27, 2019 6:54:24 AM By Stu Sjouwerman

Google's Threat Analysis Group (TAG) delivered thousands of alerts of government-backed attempts to spearphish gmail users over just a three-month period earlier this year, they reported.

Phishing Simulations Should be Educational, not Punitive

Nov 25, 2019 10:46:55 AM By Stu Sjouwerman

Phishing training programs need to be focused on educating employees rather than on shaming them, according to David Spark and Allan Alford, co-hosts of the Defense in Depth podcast. On ...

Waterloo Brewing loses $2.1 million in social engineering cyberattack

Nov 22, 2019 1:56:38 PM By Stu Sjouwerman

Waterloo Brewing Ltd. says it has lost $2.1 million in what it calls a social engineering cyberattack. The Ontario brewery says the incident occurred in early November and involved the ...

[Heads-up. This Is Ugly] After Refusing The Maze Ransomware Payment, Their Stolen Data Was Leaked

Nov 22, 2019 6:47:54 AM By Stu Sjouwerman

After a deadline was missed for receiving a ransom payment, the group behind Maze Ransomware has published almost 700 MB worth of data and files stolen from a security staffing firm. Our ...

A massive international email scam netted $3 million worth of top-secret US military equipment

Nov 21, 2019 6:42:43 AM By Stu Sjouwerman

In a recent case first reported by Quartz, a crew of international cyber criminals allegedly convinced an unidentified US defense contractor to send them millions of dollars worth of ...

It's Happening The World Over: $300K Lost To Phone Scammer

Nov 21, 2019 5:51:23 AM By Stu Sjouwerman

A woman in Singapore lost $300,000 to a scammer posing as a Singtel customer service employee, according to the Straits Times. The scammer told the victim he would fix some problems with ...

An Australian Watering Hole (but in Canberra, not the Outback)

Nov 20, 2019 7:12:14 AM By Stu Sjouwerman

The Australian Federal Parliament suffered a malware infection earlier this year after some users fell victim to a watering hole attack, the Australian Broadcasting Corporation (ABC) ...

Cybercriminal Gang, Silent Starling, Creates New ‘Vendor Email Compromise’ Category

Nov 19, 2019 2:38:04 PM By Stu Sjouwerman

New attacks focus on organizations with global supply chains looking to trick a supplier’s customers into paying fake invoices and have already impacted 500 organizations worldwide.

Malware Delivered Via Fake Browser Updates Are Back and are More Sophisticated Than Ever

Nov 19, 2019 2:34:30 PM By Stu Sjouwerman

Leveraging vulnerable website content management platforms, these attacks seek to trick users into installing malware under the guise that their web browser is out-of-date.

Now HERE is an interesting Phishing Campaign!

Nov 19, 2019 8:51:01 AM By Stu Sjouwerman

It's a phishing campaign against phishing campaigns! :-D It's a public service program that educates organizations and societies globally on the greatest cyber risk of all - the falsehood ...

Ransomware Attack Hits Louisiana State Servers

Nov 19, 2019 8:43:15 AM By Stu Sjouwerman

Louisiana Governor John Bel Edwards on Monday revealed that a ransomware attack hit state servers, prompting a response from the state’s cyber-security team. The incident appears to have ...

A Look at Election Influence And Social Engineering

Nov 19, 2019 8:37:51 AM By Stu Sjouwerman

Attempts to influence elections are by no means new, but highly targeted online advertising requires people to think about social engineering in the form of political messaging in a new ...

Real Estate Scams Have Gone Global. Bad Guys Caused Tens of Thousands of Dollars Damage Down Under

Nov 18, 2019 3:32:04 PM By Stu Sjouwerman

Scammers hijacked a total of $70,000 by imitating an Australian settlement agent’s email address, and then tricking two property buyers into sending the money to the wrong account, Perth ...

[Heads-Up] Scam Of The Week: Thousands Of Hacked Disney+ Accounts Are Already For Sale On Criminal Sites

Nov 18, 2019 7:00:00 AM By Stu Sjouwerman

Apart from me, guess who has been anticipating the Disney+ channel?

Security Awareness Training Blog

Social Engineering Blog

View Topics