Human Risk Management Blog

Social Engineering

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

Inevitable: Phishing That Pretends To Be Salesforce.com

Just a heads-up, screen shot above. The lifehacker site in Australia warned about a phishing scam using a "salesforce" email as bait. The bad guys will use anything to get you to click, ...

How to Test the Phishing Savvy of Your Staff

41 Percent Of Infected Pay The Cryptolocker Ransom

I have warned about the Cryptolocker ransomware before, but now we have some hard numbers about the percentage of people that are forced to pay up when a workstation or server has been ...

Hackers Used Spear Phishing Attack To Hack CNN Blogs

Security analysts at Intelligence firm InterCrawler published the details of the investigation on recent attack against CNN Blogs and social media accounts. Recently a few social media ...

Kiss Your Old Security Awareness Training Program Goodbye!

Is Your Security Awareness Training Program Not Working? Are Users Still Clicking Phishing Links And Opening Infected Attachments?

This Week Top 10 Phishing Scams

It's my job to keep an eye out for the most recent phishing scams and let everyone know. One of the newsletters I get as a source for this is called "hoaxslayer". They just reported some ...

Online social engineering scams flourish around Valentine's Day

Michael Cooney at Network World summarized the current scams doing the rounds related to online dating and romance sites. A good reminder that heartless con artists use social engineering ...

BREAKING NEWS Target Data Breach Started With Phishing Attack

CyberheistNews Vol 4, # 06 Cryptolocker Scrambles Files Of US Law Firm

CyberheistNews Vol 4, # 06

Fake LinkedIn Phishing Profiles Going Pro

Cryptolocker Scrambles All Legal Files Of US Law Firm

WSOCTV in Charlotte, North Carolina's reports on a Goodson's, a small US law firm there which stepped forward and bravely admitted that their whole file server was scrambled by ...

Largest Website in Sweden Social Engineering Scam

David Jacoby, Kaspersky Lab Expert wrote this blog post yesterday and it shows that employees need to be on their toes with security top of mind even when they visit the largest websites. ...

ransomware phishing warning issued by European Cybercrime Centre

Looks like the bad guys are also targeting Europe with ransomware phishing scams.

FBI: The 10 Criminal Cyber Crime Professions

The Center for Cyber Forensics and Information Security (CCFIS) reported in a blog: "The FBI has recently classified the different 'professional positions' they have encountered in the ...

Social Engineering Alert: Missed Call From A Mystery Number?

TechCrunch wrote: "The people who read our site are a pretty savvy lot. You know not to accept checks from distant princes. You can spot a phisher from a mile away. But here’s one that ...

Worst Phishing Scam Of The Week Yet: Cryptolocker

Why Security Awareness Training? Cryptolocker, That's Why... We here at KnowBe4 have been getting a lot of system admins calling us with the request for security awareness training ...

Major Hotel Franchise Announces Data Breach

White Lodging, a company that maintains hotel franchises under nationwide brands including Hilton, Marriott, Sheraton and Westin appears to have suffered a data breach that exposed credit ...

Yahoo Email Hacked

Yahoo warned yesterday that unknown attackers have attempted to access a number of Yahoo Mail accounts, and urged users to change their passwords even if they haven't been affected. Jay ...

Feb 1st Is National Change Your Password Day

Scam Of The Week: Funeral Notification Phishing Attack

Another one to warn your employees about. The bad guys do not hesitate to exploit the most basic fears of people; the sudden death of a loved one. The message claims to be from a funeral ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.