Accessibility links

Protect Against On-site Social Engineering

Corporate Security

Protect Against On-site Social Engineering

Social engineering is a method of using human interaction to convince people to break their normal security processes. It can utilize technology, but that isn’t necessary in order to reach a goal. It’s been around since the beginning of time and although it has a modern name, it really is just a game for hackers. When people hear the term Social Engineering, it’s likely they think of email Phishing attacks.  While remote social engineering attacks are extremely popular, what people often forget is that on-site social engineering attacks can be just as dangerous and in many cases, just as easy for a criminal to pull off. READ FULL STORY

Corporate Security

The Sobering State of Cybercrime And The Finserv Industry In 2022
By: Jim Stickley and Tina Davis
March 19, 2023

In the cybersecurity world, it's always good vs. evil and like in a movie, we're waiting to find out who will win the constant battle. The latest version of Akamai's “Financial Services State of the Internet (SOTI) report,” does not paint a happy picture for the “good guys.” Especially in terms of the attackers’ increasing exploitation of zero-day vulnerabilities, Botnet activity, and increasingly effective phishing attacks, particularly related to the financial services industry. READ FULL STORY

There Is Plenty Of Phishing On Online Apps--Don't Get Hooked

Mobile Security

There Is Plenty Of Phishing On Online Apps--Don't Get Hooked

A recent documentary aired on subscription streaming service, Netflix, that highlighted how difficult it is to detect when someone is trying to take advantage of human nature and kindness. You may have seen it. It has been discussed on various media and it may be difficult to watch. But it is yet another example of how criminals use social engineering and trust to get what they want. One interviewee tells the story of how she met a guy that matched and swept her off her feet and swept her bank account clean. READ FULL STORY
You've Won A Free Gas Card And Fraud, For A Small Fee

Scams & Phishing

You've Won A Free Gas Card And Fraud, For A Small Fee

We are all kind of tired of the high gas prices right now, no matter where we live or what we drive. Most visits to the fuel pump can tick up more than $100 per tank. Then, a couple of weeks later for most of us, we have to fill up again and it’s likely to be even more. Coupled with high food prices and high pretty much everything else, we would all love some financial relief for the things we need to make it through the week. Scammers are counting on us all getting fed up with high fuel prices and are luring us into fraud with a new fuel gift card scam. READ FULL STORY
Home Router Flaw May Allow A Home Network Takeover

Your Security

Home Router Flaw May Allow A Home Network Takeover

It’s once again a time when routers are targeted…successfully…by attackers who can take them over and wreak havoc in the universe. Maybe it’s not so far-reaching as to make it to into space, but it most certainly is on this planet right now. Some up to no good, have discovered they can take advantage of a vulnerability in home routers that use Arcadyan firmware. According to Juniper Threat Labs researchers, it is being actively exploited utilizing the Mirai botnet at this very moment. READ FULL STORY

Scams & Phishing

Fake Browser Updates Source Of Ransomware And Banking Malware

By: Jim Stickley and Tina Davis
March 15, 2023

An all-out alarm reported by Surcuri finds bogus alerts circulating about the need to download the latest browser update. Although it’s always recommended to keep software up to date, this report finds hackers are exploiting that call to action in a big way. Using fake updates isn’t exactly a new hacking exploit, but hackers are getting better at it over time and this latest attack is a solid example of that. In this latest discovery, hackers use email links or script code to compromise a webpage. READ FULL STORY

High-Level Execs Prime Targets For Whaling Attacks

Corporate Security

High-Level Execs Prime Targets For Whaling Attacks

Why settle for minnows when whales make much bigger, better targets? That’s a question hackers might ask themselves when determining their next victim. With no shortage of information available online about C-Suite and other high-level executives, they make lucrative email phishing targets. These execs are known as “whales” and bad actors love reeling them in because it pays big time. Because these execs can make large wire transfers happen, among other things, they have become a gold standard for phishing, fraud, and profits. READ FULL STORY
Know When It’s Time To Hang-Up. Don’t Fall Victim To These New Phone Scams

Scams & Phishing

Know When It’s Time To Hang-Up. Don’t Fall Victim To These New Phone Scams

Just recently, it was discovered three new phone scams are making the rounds. These scams play on our fears (a scammer favorite), they’re tough to spot, and they’re after your money. It’s always smart to know how they work and when it’s time to hang up. Looking at these scams can help save you and those you know from falling victim to them. The following statistics help show the financial severity of phone scams, and who’s more likely to fall for them. READ FULL STORY
Ransomware Kicking And Punching Its Way To Kombat You

Scams & Phishing

Ransomware Kicking And Punching Its Way To Kombat You

There is yet another example of how cybercriminals and their tools do not discriminate against the size of a company or the industry. This particular ransomware, that’s been punching its way around the globe since December is knocking out all in its tracks. It also creatively uses video game affiliations in its attacks. Cisco Talos researchers found ransomware that uses images of the popular game Mortal Kombat in the ransomware notes it leaves behind. READ FULL STORY
Accounts Drained By Zelle Smishing Scam

Mobile Security

Accounts Drained By Zelle Smishing Scam

From time to time, scammers come up with a new tactic using new technology, new events, or whatever they can to continue tricking us into giving up our personal or confidential information. Over the past few years and with the increasing use of texting and SMS messaging, a newer one in the bag of tricks has been coined as “smishing.” Because it’s text, it often catches people off guard and causes them to react quickly, which is exactly what you shouldn’t do. READ FULL STORY
PayPal Credential Stuffing Attacks, 35,000 User Passwords Compromised

Identity Theft

PayPal Credential Stuffing Attacks, 35,000 User Passwords Compromised

It looks like human nature strikes again. PayPal recently announced attackers succeeded with credential stuffing attacks on nearly 35,000 PayPal accounts. The widely used financial app notified its compromised clients to immediately change their PayPal passwords. The company found that the attack was limited to account holders only, and their own data systems were not breached in any way. According to PayPal, a bad actor accessed customer accounts by credential stuffing passwords compromised in prior data breaches having nothing to do with PayPal. READ FULL STORY
Are You Getting Smished? How To Tell And How To Avoid It

Mobile Security

Are You Getting Smished? How To Tell And How To Avoid It

It doesn’t take much to be a smishing victim when just a text message does the trick. A member of the email phishing and voice (vishing) family of criminal scams, replying to a smishing text can be all that’s needed to begin a successful scam. Knowing how smishing works and the tell-tale signs of these scams can help keep you from being the next smishing victim. Using pressure, fear, curiosity, trust, winning a contest, and other tactics increase their chances of reeling you in. But what do you do when a text has only one word? READ FULL STORY
Chick-Fil-A Investigating Suspicious Activity Regarding Reward Program

Scams & Phishing

Chick-Fil-A Investigating Suspicious Activity Regarding Reward Program

Cybersecurity is important, and just having awareness of current happenings is a big step in keeping your information safe. All of this is something some Chick-Fil-A customers have figured out recently. The company released an official announcement stating that it had spotted what is being dubbed by them as "suspicious activity" that was apparently taking place on some of the digital gift card accounts of their customers. This specifically affected the Chick-Fil-A One accounts. READ FULL STORY
Reddit Hacked After Employee Fatigue From MFA Bombing Attacks

Your Security

Reddit Hacked After Employee Fatigue From MFA Bombing Attacks

Earlier this year, Reddit reported being the victim of a data breach utilizing a credential-theft technique that’s on the rise. They found “bombing fatigue” exploited an MFA (multi-factor authentication) weakness after a relentless, socially engineered email phishing campaign targeted employees. The fatigue it created for one staffer led to the successful attack. Here’s the scoop, in a nutshell, so you know what to look out for, not only when using Reddit, but any time you log in to a website. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.