Accessibility links

Protect Against On-site Social Engineering

Corporate Security

Protect Against On-site Social Engineering

Social engineering is a method of using human interaction to convince people to break their normal security processes. It can utilize technology, but that isn’t necessary in order to reach a goal. It’s been around since the beginning of time and although it has a modern name, it really is just a game for hackers. When people hear the term Social Engineering, it’s likely they think of email Phishing attacks.  While remote social engineering attacks are extremely popular, what people often forget is that on-site social engineering attacks can be just as dangerous and in many cases, just as easy for a criminal to pull off. READ FULL STORY

Corporate Security

BECs CRUSH Ransomware Attacks As Most Costly Cybercrime
November 22, 2022

Another cybercrime is grabbing the spotlight after years of taking a backseat to ransomware’s headline-grabbing attacks. Business email compromise, aka “BEC”, cybercrimes have been quietly racking-up victims by stealing their money via email fraud. Organizations should be aware that despite the lack of headlines, BECs are actually a bigger threat than ransomware. The FBI finds last year in the U.S., $2.4 billion was lost to BEC attacks, up 39% from 2020. READ FULL STORY

Meet Escanor RAT. What The New, Spying, Thieving, Dirty Trickster Trojan Is Up To

Corporate Security

Meet Escanor RAT. What The New, Spying, Thieving, Dirty Trickster Trojan Is Up To

Cybersecurity researchers discovered a new RAT (remote access trojan) having its way with many big-bank victims. The RAT named Escanor was found leveling its spyware on financial institutions, able to steal data making them ripe for the picking. International banks in 10 countries, including in the U.S., have been attacked by Escanor, with the trojan forging paths directly to their vaults, so to speak. This is a RAT we should all know about, especially since who and where Escanor will strike next is unknown. READ FULL STORY
Office 365 Encryption Flaw Exposes Email Content, A Little-Known Big Security Risk

Corporate Security

Office 365 Encryption Flaw Exposes Email Content, A Little-Known Big Security Risk

Microsoft’s Office 365 has a new bug you’ll want to squash to keep your sensitive information sent via email, secure. The bug in question belongs to Microsoft Office 365 Message Encryption (OME), that encrypts email messages and attachments so they can’t be read by those with bad intent. Secure messaging is the idea behind using OME, but with this flaw, it’s not the reality using OME. WithSecure took it upon themselves to issue an advisory warning to organizations about the flaw, when Microsoft didn't respond. READ FULL STORY
'Tis The Season Of Fake Shopping Sites

Scams & Phishing

'Tis The Season Of Fake Shopping Sites

As we’re all getting back into the holiday spirit after a somewhat glum 2020 season, it’s important to remember that the holiday shopping season doesn’t end on December 25. In fact, some retailers put their marketing effort into overdrive. There are after holidays sales, new year’s sales, and even “getting rid of all this stuff we didn’t sell at Christmas” sales advertised under some creative title. Retailers try to take advantage of the shopping spirit as far into the new year as they can and those who like to capitalize on this are also upping their game. READ FULL STORY

Identity Theft

Toyota’s Accidental Data Leak Exposes 300,000 Pieces of Customer PII On GitHub
November 18, 2022

If you drive or have owned a Toyota Motor Corporation vehicle over the past five years, you should know about this recent news. The company announced an accidental data leak was discovered, a leak that lasted nearly five years long. Toyota says nearly 300,000 pieces of their customer’s personally identifiable information (PII) were exposed after being found published on GitHub last month. According to the company, the data leaks began in December, 2017 and continued until being discovered in September of this year. READ FULL STORY

Accounts Drained By Zelle Smishing Scam

Mobile Security

Accounts Drained By Zelle Smishing Scam

From time to time, scammers come up with a new tactic using new technology, new events, or whatever they can to continue tricking us into giving up our personal or confidential information. Over the past few years and with the increasing use of texting and SMS messaging, a newer one in the bag of tricks has been coined as “smishing.” Because it’s text, it often catches people off guard and causes them to react quickly, which is exactly what you shouldn’t do. READ FULL STORY
Dots and Dashes Aim To Steal Your Login Credentials

Scams & Phishing

Dots and Dashes Aim To Steal Your Login Credentials

What do hackers do in their spare time? They create jigsaw and other types of puzzles to hide their various attacks. That’s according to recent Microsoft reports, anyway. The software giant’s Security Intelligence team has stated it saw that in a recent attack, an “HTML attachment is divided into several segments, including the JavaScript files used to steal passwords, which are then encoded using various mechanisms…” But wait! There's even more! READ FULL STORY
Unforgiving Scammers Seek Your Credentials When Applying For Student Loan Debt Forgiveness

Scams & Phishing

Unforgiving Scammers Seek Your Credentials When Applying For Student Loan Debt Forgiveness

We can all use a little financial help from time to time; especially those saddled with student loan debt. So, there’s no surprise that after the Student Loan Debt Relief Plan was announced and neared reality, an immediate uptick in fraud schemes surrounding this program started to appear. The FBI states scammers are working over time looking to take advantage of those individuals seeking this student forgiveness. Even if you are not looking for loan forgiveness with this program, you still may see phishing email about the program. READ FULL STORY
You've Won A Free Gas Card And Fraud, For A Small Fee

Scams & Phishing

You've Won A Free Gas Card And Fraud, For A Small Fee

We are all kind of tired of the high gas prices right now, no matter where we live or what we drive. Most visits to the fuel pump can tick up more than $100 per tank. Then, a couple of weeks later for most of us, we have to fill up again and it’s likely to be even more. Coupled with high food prices and high pretty much everything else, we would all love some financial relief for the things we need to make it through the week. Scammers are counting on us all getting fed up with high fuel prices and are luring us into fraud with a new fuel gift card scam. READ FULL STORY
Malware On A USB Stick Coming To A Mailbox Near You

Scams & Phishing

Malware On A USB Stick Coming To A Mailbox Near You

The FBI issued a warning to be careful where you stick that USB stick. According to recent reports, the FBI is aware of a financially motivated group of cyber criminals who are sending out malware infected USB sticks in the mail or having them delivered by the United Parcel Service (UPS). Packages were sent to companies in the transportation and insurance areas at the end of 2021. Recently, the U.S. Defense industry was targeted. The particular sticks of concern contain “BadUSB” or “Bad Beetle USB.” READ FULL STORY
Google And Windows Sunsetting-Update Now

Your Security

Google And Windows Sunsetting-Update Now

Without great fanfare, Google has announced that in February 2023, users of Windows Versions 7, 8, and 8.1 will stop receiving support for their version of Google Chrome. The dwindling numbers of users and the rapidly aging code used in these versions of Windows have put the final nail in the coffin for users who have become accustomed to Google updates and other forms of support. Google will opt out of supporting these older Windows versions when it releases the stable and market-ready version of Chrome 110. READ FULL STORY
Golden Chickens Hatch LinkedIn Fake Job Spear Phishing Attacks

Scams & Phishing

Golden Chickens Hatch LinkedIn Fake Job Spear Phishing Attacks

Thanks to a massive cyberattack against LinkedIn earlier this year, 7 million user profiles were stolen. Of those, 2 million were posted for free by the hacker and 5 million more were posted for sale on underground forums. It’s the email addresses included in the stolen profiles that has LinkedIn and its users rightly concerned. A group is using the hijacked email addresses to target LinkedIn members with fake job openings via spear phishing. READ FULL STORY
Online Shopping Season Brings Out The Holiday Fraud

Scams & Phishing

Online Shopping Season Brings Out The Holiday Fraud

As 2022 both flies by, believe it or not, the holiday online shopping season is upon us. This is your annual reminder to be on the lookout for all kinds of cyber creeps who are out there waiting to take advantage of all of us just wanting some cheer with our shopping excitement in an otherwise uncertain time. As that time slowly ticks away, or rushes by, depending on your point of view, the hackers continue to improve upon their various cyber scams. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.