Mobile Security

DawDropper Trojan Infects 17 Google Play Store Apps. Are Any On Your Android Mobile?

Since opening over a decade ago, Google Play Store has evolved into a site that is worth questioning for downloading malware apps. Despite blocking 1.2 million apps last year and introducing Google Play Protect as a safety net, malware continues to plague the Store. Enter “DawDropper." Trend Micro researchers discovered several apps that carried DawDropper banking malware. DawDropper is a dropper-style banking trojan that hides in apps but doesn’t activate until a user downloads it. READ FULL STORY

Education

Tips for Securing Your Mobile Devices

Education

What Is A VPN And Do I Need One At Home

Education

How To Create A Strong And Unique Password For Every Account

Scams & Phishing

CAPTCHA Used as Bait For Growing Number Of Email Scams

September 21, 2022

Most of us are familiar with the funky CAPTCHA verification window that occasionally pops-up when signing onto a website. CAPTCHA systems lend a level of credibility to those of us asked to verify online that we’re human and not a bot. Seeing it makes us feel better about the site being more secure than others. After all, only a 100% legitimate website or service would dare use CAPTCHA, right? Wrong. This now Google-owned service has become a favorite bait for scammers who want you to believe they’re legitimate, and it’s working big-time. READ FULL STORY

Your Security

Relentless Ransomware Attacks Against Education Still Rising

Whether K-12 or higher education, schools continue to be a ripe target for ransomware attacks. It’s safe to say it’s not a fleeting hacking trend when for years now, colleges, universities, and K-12 have faced relentless ransomware attacks and the devastating fallout that results. Sophos’ State of Ransomware in Education 2022 finds an average 60% increase in attacks against the education sector. Sadly, most education budgets don’t provide enough for the needed improvements and deciding to pay the ransom is the other less desirable and pricey option. READ FULL STORY

Scams & Phishing

When Tragedy Arises, Scammers Rise To The Occasion

Scams surrounding crisis situations or high-profile events never cease. Taking advantage of current events and crises are a lure many cyberthieves cannot wait to take advantage of for their own gain. While natural disasters and the fundraising surrounding it opens a door for scammers to steal donations from those who give to provide relief for those in need, others such as the recent death of Queen Elizabeth II are also fair game for cybercrime. READ FULL STORY

Identity Theft

Popular Password Management Company LastPass Compromised Again

We said it could happen, and it has. It’s not the first time a security incident has plagued the company. This time, the popular password management software provider, LastPass, experienced a data compromise that targeted portions of the company’s development environment, including the source code and parts of the company’s technical data. According to a press release from LastPass' CEO, the attack was perpetrated through one compromised developer account. READ FULL STORY

Mobile Security

Keeping Your Mobile Device Apps Virus Free

September 17, 2022

It’s no secret that cybercriminals take advantage of anxiety-filled times and the current coronavirus pandemic (COVID-19) is most certainly one of those moments. The latest cybersecurity news reports that Android smartphones are being targeted with apps claiming to have up-to-date data on COVID-19. These infected apps promise the latest updates, but to unsuspecting users who download them, they also promise malware will surely be installed on your mobile device. READ FULL STORY

Your Security

Cracking Dictionaries: A Hacker's Guide For Password Thievery

Many businesses struggle with password security, especially when employees don’t take it as seriously as they should. Human nature being what it is, staff who don’t use password-smarts at home are likely to bring that same behavior to work. The reality is that the average financial cost per businesses from a cyberattack is $200,000. With statistics like these, one would think that fortified passwords should be mandatory and not an exception. READ FULL STORY

Scams & Phishing

WastedLocker Ransomware Sneaks In And Out, Bypasses Detection

A very public attack on Garmin navigation systems alerted the cybersecurity community to a new ransomware created by one of the most successful and prolific attack groups in the world. The U.S. Treasury Department even officially sanctioned the group last year, blaming it for some of the worst hacking and bank fraud schemes over the past decade. Recently, it was found that the ransomware created by this group can enter and exit a data system entirely undetected. READ FULL STORY

Your Security

Online Banking Risks – How Financial Institutions And Customers Partner For Better Security

The financial services sector has gone through significant changes since horse-drawn wagons delivered money to banks. Long after that, in-person visits to your local branch gave way to online banking on devices. But the start of the pandemic in 2020, left its mark on financial services and their customers. The risks of e-banking have been a very real concern ever since bad actors switched from cracking bank safes to cracking online accounts instead. A partnership with your financial institution can help boost online security. READ FULL STORY

Scams & Phishing

Sustained Phishing Campaign By The SEABORGIUM Threat Actor Reported By Microsoft

Your Security

Because That’s Where The Money Is. Top Cybersecurity Threats To Financial Institutions

Your Security

Emotet Banking Malware Up 375% Now Targeting Weak Passwords

Corporate Security

Math Helps Phishing Campaign Evade Detection, Steals Office 365 Logins

In this latest phishing attack, hackers were found adding mathematical symbols into a company logo design heading at the top of a phishing email. It uses a sneaky tactic to avoid detection and it’s working. Analysts at INKY discovered the phishing campaign that hides math symbols in a major company logo as the first step to stealing Office 365 login credentials from victims. And there is no surprise that it's succeeding. Since we’re all potential victims, we need to be aware of what to look for as well as what not to fall for with email phishing. READ FULL STORY

Identity Theft

DoorDash Users Get Heartburn…Again…After Another Data Breach

It’s not the first time your food delivery included tipping off hackers by sharing information with them. DoorDash again has announced that an unauthorized party gained access to information within their network and went noodling around. Like the data breach that happened back in 2019, DoorDash blames a third party for the intrusion, but this time, the company isn’t delivering many further details. They aren’t saying when the breach occurred, how many were affected, or much else. READ FULL STORY

Your Security

Home Router Flaw May Allow A Home Network Takeover

It’s once again a time when routers are targeted…successfully…by attackers who can take them over and wreak havoc in the universe. Maybe it’s not so far-reaching as to make it to into space, but it most certainly is on this planet right now. Some up to no good, have discovered they can take advantage of a vulnerability in home routers that use Arcadyan firmware. According to Juniper Threat Labs researchers, it is being actively exploited utilizing the Mirai botnet at this very moment. READ FULL STORY

Your Security

More Pop-Up Ads? Yes Please! Said No One. Ever!

Those intrusive pop-up ads that slow down our browsers and bounce the content we want to read are by most accounts, insufferable. Knowing that, developers have created ad blocker extensions to help with this annoying and potentially harmful web surfing issue. One self-proclaimed ad-blocking extension, AllBlock Chromium, however, is doing the exact opposite of what it says it does and those behind it are making profits off that broken promise. READ FULL STORY

Your Security

Google Hit With 6th Zero-Day Vulnerability in Chrome in 2022. Update Chrome Now

Some days are better than others and Google has certainly had some better days than of late. On the heels of at least 5 other zero-day vulnerabilities in 2022 alone, there is another one that requires attention of users. This one is rated as a high-severity security issue and is noted as CVE-2022-307. Google has stated it isn’t releasing many details until the majority of users are supplied with the patch. Fortunately, it's already being issued. READ FULL STORY

We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.

Stickley on Security Inc. Privacy Policy

This Privacy Policy applies to and is provided on behalf of Stickley on Security. (collectively referred to as "We", "Us", or "Our") and describes Our information gathering practices and policies in connection with this Site. We value your ("User", "You", or "Your") privacy and recognize the sensitivity of Your personal information. We are committed to protecting Your personal information and using it only as appropriate to provide You with the best possible service, products, and opportunities. Use of this Site constitutes consent to Our collection and use of personal data as outlined herein.

COLLECTION AND USE OF PERSONAL INFORMATION FROM SITE USERS

We collect personally identifiable information from Users who provide it to us for billing purposes. For example, We collect Your name, street address, city, state, zip code, telephone number, email address, and financial information, such as a credit card number, if You use the Site to register or renew a license. We may use this information to contact You regarding the status of Your account and orders placed, and to alert You to new information, products and services, events and other opportunities. We recognize that You may wish to limit the ways in which You are contacted and provide You with opt-out options below. Information about Our experiences and transactions with you, such as your payment history, types of services and/or products you purchased are not shared with organizations outside of Stickley on Security.

We will not disclose to third parties (that is, people and companies that are not affiliated with Us) individually identifying information, such as names, postal and e-mail addresses, telephone numbers, and other personal information, except to the extent that it is necessary to process and provide You with Your order, license request or other request. Your contact information may also be provided to the extent necessary to comply with applicable laws or legal processes (e.g., subpoenas), or to meet contractual obligations outlined in this policy, or to protect Our rights or property. We will cooperate with all law enforcement authorities.

If Your order, license request or other request is processed by a third-party, or if You are provided with bulletin boards and chat rooms and/or email capabilities on this Site, please note that in the event that You voluntarily disclose personally identifiable information in those instances, that information, along with any substantive information disclosed in Your communication or post, can be collected, correlated and used by third parties. This may result in unsolicited messages from third parties. Such activities are beyond Our control, and We encourage You to check the applicable privacy policy of such party when providing personally identifiable information.

For each visitor to this Site, Our server can detect and collect certain information, including the User's domain name and e-mail address, and can identify the Web pages the User visited or accessed. We may use this information in order to measure interest in and use of the various areas of the site.

We do not knowingly solicit information from children and We do not knowingly market the Site or its services to children.

OPT-OUT

You may at any time opt out of having Your personal information used by Us to send You promotional correspondence by contacting Us via e-mail provided in the "Contact Us" section below.

PROMOTION CODES

"Promotion codes" are offered by third-party affiliates of the Stickley on Security Training Videos. If you choose to include a "Promotion Code" when placing your order, the affiliate who is associated with that promotional code will receive your organizations name. They will NOT however receive any other information related to your account. The sharing of the organization name only applies when a "Promotion Code" is included during the order process.

USE OF COOKIES

1. First-party cookies
User input cookies to keep track of the user's input when filling online forms, shopping carts, etc., for the duration of a session, or persistent cookies limited to the duration of an operation such as purchase or trial;
User identification persistent cookies, to identify the user visited the website for the first time;
Authentication cookies, to identify the user once he has logged in, for the duration of a session;
user interface customization cookies such as time zone and shopping cart status info, for the duration of a session (or slightly longer).

2. Third-party cookies
social plug in content sharing cookies, for logged in members of a social network;
Google Analytics cookies to generate statistical data on how the visitor uses the website.

How do we use them?
Where strictly necessary. These cookies and other technologies are essential in order to enable the Services to provide the feature you have requested, such as remembering you have logged in.

For functionality. These cookies and similar technologies remember choices you make such as time zone and shopping cart info. We use these cookies to provide you with an experience more appropriate with your selections and to make your use of the Services more tailored.

For performance and analytics. These cookies and similar technologies collect information on how users interact with the Services and enable us to improve how the Services operate. For example, we use Google Analytics cookies to help us understand how visitors arrive at and browse our products, services and website to identify areas for improvement such as navigation, user experience, and marketing campaigns.

Social media cookies. These cookies are used when you share information using a social media sharing button or .like. button on our websites or you link your account or engage with our content on or through a social media site. The social network will record that you have done this. This information may be linked to targeting/advertising activities.

How can you opt-out?
To opt-out of our use of cookies, you can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from websites you visit. If you do not accept cookies, however, you may not be able to use our Services.

Updates to this Cookie Policy
This Cookie Policy may be updated from time to time. If we make any changes, we will notify you by revising the "effective starting" date at the top of this notice.

INFORMATION SECURITY AND CONFIDENTIALITY

We maintain physical, electronic and procedural safeguards to prevent the unauthorized release of or access to Your personal information. When We transfer and receive certain types of sensitive information such as financial information, We redirect visitors to a secure server. We do not store or reuse Your credit card information. We do not record or manager financial information about You (including credit card and other payment information). However, such precautions do not guarantee that this Site is invulnerable to all security breaks. We make no warranty, guarantee, or representation that the use of this Site is protected from viruses, security threats, or other vulnerabilities and that Your information will always be secure. We cannot guarantee the confidentiality of any communication or material transmitted to/from Us via the Site or e-mail. Use of the Internet is solely at Your own risk and is subject to all applicable local, state, federal, and international laws and regulations.

THIRD PARTY PROCESSING

Stickley on Security uses the vendor Authorize.net to process all payment transactions. When making a purchase on this site, You also accept the Terms and Conditions and Privacy Policy of Authorize.net.

CONTACT US

This Privacy Policy may be updated periodically and posted on this Site. It applies only to Our online practices and does not encompass other areas of the organization. We reserve the right to change this Policy at any time by posting revisions. By accessing or using the Site, You agree to be bound by all of the Terms of this Privacy Policy as posted at the time of Your access or use. We reserve the right to contact Users of the Site regarding changes to the Terms and Conditions generally, this Privacy Policy specifically, or any other policies or agreements relevant to the Site's Users. If You have any questions about this Policy, You may email to:

info@stickleyonsecurity.com

Email Address

Create a new Verification Phrase Enter any word or words you like.
The email newsletter will arrive from news@stickleyonsecurity.com Please wait...