Human Risk Management Blog

Social Engineering

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

New Spear Phishing Campaign Targets 27 Famous Brands With Malicious SLK Files

A new spear phishing campaign is targeting twenty-seven companies around the world with malicious SLK (Symbolic Link) files, according to BleepingComputer. The attackers pose as a real ...

A U.S. Natural Gas Operator Shuts Down For 2 Days After A Phishing Attack Infects It With Ransomware

Dan Goodin at Ars Technica reported something worrisome: "A US-based natural gas facility shut down operations for two days after sustaining a ransomware infection that prevented ...

Cyberattacks in 2019 Cost over $3.5 Billion in Victim Losses with Business Email Compromise Taking in Half

The FBI’s annual year-in-review breaks down how 467,000 cyber attacks succeeded in taking consumers and businesses alike for billions of dollars.

Seasonal Scams: Valentine's Day Edition

Romance scams and confidence scams cause both emotional and financial pain. According to the latest FBI's Internet Crime Complaint Center (IC3) figures for 2019, confidence/romance scams ...

FTC Alert: Coronavirus Scammers Love Scary Bad News

Scary news stories in the headlines always bring out the bad guys looking to make a quick illegal buck.

Education is Necessary to Stay Ahead of Threats

Most people don’t realize how vulnerable they are to social engineering until they experience it, according to Anna Collard, the founder of KnowBe4’s South African security awareness ...

Charities Need to Watch Out for Scammers

The UK’s National Council for Voluntary Organisations (NCVO) has warned charities to be wary of scammers, Charity Digital News reports. The NCVO’s Road Ahead 2020 report outlines trends ...

Look-alike Domain Spoofing Scam Takes Charity for $1 Million

In yet another case of business email compromise, a charity is fooled through a combination of diligence, sophistication, and social engineering.

Not the Antiques Roadshow

Scammers conned a Dutch museum into sending them £2.4 million (about $3.1 million) by posing as a real London-based art dealer who planned to sell the museum a John Constable painting, ...

Unusual New Botnet-driven Phishing Attack With Tricky Downloaders

A large phishing campaign is distributing malicious Excel documents and utilizing irritating pop-ups to trick users into enabling macros, researchers at Lastline have found. The campaign ...

[Heads-up] Scam Of The Week: Coronavirus Phishing Attacks In The Wild

Yup, you can count on it, when there is a worldwide health scare, the bad guys are on it like flies on $#!+. We are seeing a new malicious phishing campaign that is based on the fear of ...

Contributing to the Delinquency of a Major

A Swedish man used a multitude of forged credentials and a fake school diploma to join the Swedish military, where he maintained the ruse for eighteen years and eventually attained the ...

Scam Of The Week: "Kobe Bryant Dead, Dies in Helicopter Crash"

Today, news broke that Kobe Bryant died in a helicopter crash. His daughter Gigi was also on board and died in the crash. This is a celebrity death that the bad guys are going to be ...

Scam Of The Week: Exit Windows 7, Enter Scams

Microsoft ended support for the Windows 7 operating system on January 14th, and scammers are taking advantage of the long-anticipated news to launch tech support scams, according to the ...

Amazon Phishbait Chums British Waters

Action Fraud, the UK's fraud reporting center, has warned of a widespread phone scam targeting Amazon customers. The phone calls are automated and inform recipients that their Amazon ...

Emotet Trojan Intelligently Targets Organizations, Impersonates Victims to Improve Attack Success

According to new insights from Cisco Talos, this banking malware is getting nastier as it moves into the island hopping space via email attacks using social engineering.

Cyber Incidents Are the Top Concern Among Executives

Businesses are finally realizing the continually present threat that hackers, scammers, and cybercrime organizations pose, according to new data from insurer Allianz.

Bad Guys Built A Completely Fake News Website For A Bitcoin Phishing Scam

The Central Bank of Malta has issued a statement warning people about a bitcoin phishing scam being pushed by a spoofed news website, the Times of Malta reports. The site imitated a ...

Texas School District Loses $2.3 Million In BEC Scam

Texas’s Manor Independent School District was the victim of a costly 2.3 million dollar Business Email Compromise (BEC) scam in November of 2019.

An Overview of Phishing from the Accounting Sector

Employee training is an essential long-term defense against phishing attacks, according to David Barton and Kimberly Anderson at UHY Advisors. In an article for Accounting Today, Barton ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.