Spear phishing alert: Hong Kong Monetary Authority Invoice

Oct 12, 2013 9:23:00 AM By Stu Sjouwerman

Experts warn that cybercriminals are using fake Hong Kong Monetary Authority invoices to distribute a piece of malware. The emails are entitled “Invoice #3404196 – Remit File” and they ...

More Likely to Fall for a Phishing Scam If You’re a Neurotic Woman?

Oct 7, 2013 9:48:00 AM By Stu Sjouwerman

Softpedia published an article I have a problem with. There is so much wrong with this that I don't even know where to start. They started out with:

Inside The Adobe Databreach Disaster

Oct 7, 2013 9:21:00 AM By Stu Sjouwerman

Last week Adobe announced probably the worst news ever for a tech company. Both their source code and customer lists had been stolen. EPIC FAIL!

Scam Of The Week: Affordable Health Care "Advisers"

Sep 30, 2013 2:53:00 PM By Stu Sjouwerman

Tomorrow, Tuesday October 1, 2013, the first stage of the new health care act kicks in. You can start shopping for policies on new insurance "marketplaces". There is going to be an ...

Your Employees' Identity -Has- Been Stolen

Sep 30, 2013 9:21:00 AM By Stu Sjouwerman

There is the expression that there are two kinds of companies. The ones that know they are hacked and the ones that don't. It's safe to assume your network has already been compromised ...

FBI: “Beta Bot” malware kills your anti-virus and steals data

Sep 20, 2013 2:13:00 PM By Stu Sjouwerman

This week, the FBI sent out a warning that a strain of malware known as "Beta Bot" can turn off your antivirus, stops access to the websites of antivirus vendors so that your antivirus ...

Is Your Security Awareness Training Program Broken?

Sep 17, 2013 4:39:00 PM By Stu Sjouwerman

Steve Ragan over at CSO Magazine wrote:

RAPID7 SECURING USER RISK

Sep 17, 2013 3:00:00 PM By Stu Sjouwerman

Rapid7 found 66% of IT professionals conduct user security awareness training to reduce the risk of successful phishing attacks.

Kevin Mitnick Details Modern IT Threats; spear phishing and more

Sep 2, 2013 12:50:00 PM By Stu Sjouwerman

One of the most infamous hackers of all time talks about Website security and what users should do to protect themselves. In the world of computer security hackers, few are as well-known ...

SEA used spear-phishing in attack on NY Times

Aug 29, 2013 1:45:00 PM By Stu Sjouwerman

A spear-phishing attack, one of the most common and oldest cyber tricks in the book, enabled hackers to hijack and modify the DNS records for several domains on Tuesday, including The New ...

Cybercrime Automates Fake ID's For Spear-phishing

Aug 28, 2013 9:39:00 AM By Stu Sjouwerman

Today it was reported through several sources that a new Cybercrime-as-a-Service option is available: creation of fake scanned passports, ID cards, driver's licenses and fake scanned ...

IT Security Is Broken Bad

Aug 18, 2013 11:48:00 AM By Stu Sjouwerman

With the TV show Breaking Bad in its last season, this seems to be a fun title. However, the topic is not all that much fun. You should realize it's not a question of when you will be ...

Spear-phishing attackers vandalize CNN, TIME and Wash Post

Aug 16, 2013 8:40:00 AM By Stu Sjouwerman

You would think that by now journalists and people in media and advertising would be on the alert for social engineering red flags. But no. Syrian hacktivists sent a spear-phishing attack ...

Employees the Weakest Link of Cyber Security, Report Finds

Jul 22, 2013 10:31:00 AM By Stu Sjouwerman

Antivirus company Bitdefender reported something important. Here is their blog post of July 17, 2003.

Congressional Aides Targeted By Spear-phishing Attacks

Jul 19, 2013 10:05:00 AM By Stu Sjouwerman

Reuters just reported that Congressional aides in the Senate and House of Representatives said on Thursday that they were notified of a potential security risk involving email and other ...

7 reasons for security awareness failure

Jul 11, 2013 12:04:00 PM By Stu Sjouwerman

Ira Winkler and Samantha Manke just wrote a great article at the CSO site about why security awareness programs fail. They started out with: "There is a great dichotomy in Security ...

CTO of media company faked-out employees with "phishing" emails

Jul 8, 2013 10:54:00 AM By Stu Sjouwerman

There is a fascinating article in SC Magazine dated July 3, 2013 which tells the story of Atlantic Media Chief Technology Officer Tom Cochran, who blasted out a simulated phishing email ...

Five Ways Your Employees Can Kill Your Company

Jul 6, 2013 1:17:00 PM By Stu Sjouwerman

One - Insider Threat: Stealing valuable information for either profit or idealistic motives. Examples: Software developers taking home code for their next job, sales people downloading ...

The Inevitability Of "The Click"

Jul 3, 2013 4:17:00 PM By Stu Sjouwerman

From the 2013 Verizon Data Breach Investigations Report. Note that i t only takes 20 emails to get one successful click on a phishing attack. Read the story above!

FBI Warns of Spear-Phishing Attacks

Jul 2, 2013 1:17:00 PM By Stu Sjouwerman

Spear-phishing attacks are up, and they are targeting individuals across all industries, according to a new warning issued by the U.S. Federal Bureau of Investigation .

Security Awareness Training Blog

Spear Phishing Blog

View Topics