Accessibility links

Scattered Spider’s Web Of Lies, Deception And Ransomware

Your Security

Scattered Spider’s Web Of Lies, Deception And Ransomware

Warnings from the FBI and CISA came in loud and clear recently…Scattered Spider’s cyberattacks are more hazardous and crippling than ever before. Their high-profile, financially motivated attacks rely on social engineering for data theft, extortion, and ransomware attacks. And when both security agencies release a joint advisory warning to us about this threat group, it’s smart to listen. These threat actors made headlines for crippling financial attacks against several large organizations recently and they've increased the stakes playing their games. READ FULL STORY

Your Security

What's Behind Man-In-The-Middle Attacks and How to Avoid Them
By: Jim Stickley and Tina Davis
May 17, 2025

It’s not the game many of us played as kids, but it is a distorted take on the same idea. Man-in-the-middle (MitM) cyberattacks do put someone in the middle of two sides, but that someone is a cybercriminal. And those on either side are clueless victims. In reality, MitM attacks are anything but a game. A typical MitM attack can disrupt operations, intercept usernames and passwords, emails, banking, and other financial details. Read on about how MitM attacks play out, including ways to avoid being caught up in these crimes. READ FULL STORY

MoneyGram Breach Reminds Us to Add an Extra Gram of Security to Accounts

Identity Theft

MoneyGram Breach Reminds Us to Add an Extra Gram of Security to Accounts

Just recently, the money transfer service, MoneyGram announced that hackers were able to access customer information. The incident happened sometime between September 20 and 22, 2024, but it was discovered on September 27. While the number of customers affected is not known, what is known, besides the fact that the attackers had unnoticed access for up to five days, is that the breach impacted various types of sensitive information. So, if you have used MoneyGram at any time, you should read on. READ FULL STORY
Slow Browser? It May Have Been Hijacked By Malware

Your Security

Slow Browser? It May Have Been Hijacked By Malware

Before calling your internet provider to complain about a slow browser think about this:  It’s no secret malware loves to hide in all kinds of things like adware, spyware, scareware, and fake browser updates. Finding your browser is not only slow, but also acting strangely is a sign something isn’t quite right. If after going through the internet provider's standard toolbox for troubleshooting doesn't help, it’s time to think about malware. READ FULL STORY
Typosquatting And Fake Pop-ups Detailed

Security Education Videos

Video Icon Typosquatting And Fake Pop-ups Detailed

Cyber criminals continue to update how they target and attack people and organizations.  In this video you will learn about ransomware, a favorite of cyber criminals and a common way systems become infected.  In addition, you will learn about new cyber extortion techniques that will become far more popular in the near future. With a little research and a cautious approach to links and attachments, chances are you can avoid being a victim of cybercrime. READ FULL STORY

Your Security

It’s on the Rise—And More To Know About ATO Fraud
By: Jim Stickley and Tina Davis
May 13, 2025

If you’re not able to login to an account, you might be victim to an account takeover (ATO). According to Spy Cloud, 22% of adults in the U.S. have experienced an ATO. And globally in 2023, ATOs grew by 155%. ATO’s target individuals and organizations. But bringing ATOs home, Spy Cloud finds they affected more than 24 million households. Financial theft is the undisputed goal of an ATO. With this crime on the rise, it’s a smart idea to learn more about them. READ FULL STORY

Just Two Words Can Put You In The Middle Of A Smishing Scam

Scams & Phishing

Just Two Words Can Put You In The Middle Of A Smishing Scam

Phishing by text or “smishing” has long been a thorn in the side of smartphone users. With cybercriminals always looking for new ways to lure victims, this latest smishing attack is doing the trick. And now, a Chinese smishing network using just two words in a text are tricking victims into handing over sensitive information. The Federal Trade Commission (FTC) reports that last year, scam texts alone cost consumers a reported $470 million and growing. READ FULL STORY
No Organization is Safe from Ghost Ransomware

Corporate Security

No Organization is Safe from Ghost Ransomware

Both the FBI and CISA (Cybersecurity and Infrastructure Security Agency) recently released a warning about a ransomware group called Ghost. This Chinese state-sponsored threat group means business, targeting everything from critical infrastructure and schools to healthcare and religious organizations. They also warn no organization of any kind is safe from Ghost attacks. By changing tactics for hooking victims, Ghost is also known by a host of other names. Here’s what you need to know, now. READ FULL STORY
Badbox Brings Drive By Malware to New Level in New Version

Mobile Security

Badbox Brings Drive By Malware to New Level in New Version

There’s a new twist on an earlier version of Badbox that’s infecting Android devices with its malware. Badbox next gen has arrived and it’s infecting everything from TV streaming devices used at home and in schools and businesses, to car infotainment systems. This version of Badbox is blowing up with help from drive-by downloads and victims who have no idea they just unleashed a “Badbox bomb.” Security researchers say this new one signals a key change in tactics now focusing on traditional drive-by downloads. READ FULL STORY
AI Aided Phishing Scams Target Business Execs at a Faster Clip in 2025

Scams & Phishing

AI Aided Phishing Scams Target Business Execs at a Faster Clip in 2025

AI-powered bots are now capable of analyzing vast amounts of data from online profiles. This enables them to craft emails that closely mimic the tone and style of a company or individual. This level of personalization makes the scams more convincing and harder to detect. So, it’s no surprise that there's been a notable surge in highly personalized phishing scams aimed at corporate executives. These scams are becoming increasingly sophisticated and succeeding, largely due to the integration of artificial intelligence (AI) by cybercriminals. READ FULL STORY
Scary New Mac Attack Locks Browsers

Your Security

Scary New Mac Attack Locks Browsers

A new scareware attack is targeting Mac users, tricking them into believing their computer has been locked by Apple. Cybercriminals use a browser-based pop-up scam that mimics Apple’s official "Find My Mac" lock screen. Researchers at LayerX Labs have been tracking this for a while now. For this ruse, a fake lock screen appears after users visit compromised or malicious websites, creating panic and pressuring them into taking immediate action. READ FULL STORY
Meerkats Shapeshift to Steal Logins

Scams & Phishing

Meerkats Shapeshift to Steal Logins

Morphing Meerkat is a recently identified phishing-as-a-service (PhaaS) platform that employs advanced techniques to deceive users and steal credentials. Discovered by cybersecurity firm Infoblox, this platform exploits Domain Name System (DNS) mail exchange (MX) records to dynamically generate fake login pages, impersonating over 100 brands, including Gmail, Outlook, AOL, Office 365, and Yahoo. The attack initiates when a victim clicks on a malicious link embedded in a phishing email. READ FULL STORY
FBI Warns to Avoid Costly Phantom Hacker Attack

Your Security

FBI Warns to Avoid Costly Phantom Hacker Attack

Cyber creeps are on the move again with a financial hack no one is immune from. Even the FBI is warning the public about “Phantom Hacker” attacks they say are growing fast and cleaning out funds from unsuspecting victims. It’s a slick and quick attack, and before you know it, your hard-earned cash is gone in a flash. This scam includes a financial phishing phone call and a wire transfer of your money. Here’s what you need to know about this scam, and fast. READ FULL STORY
There is an Uptick in Fake Emergency Data Requests

Scams & Phishing

There is an Uptick in Fake Emergency Data Requests

Late last year, the FBI issued a Private Industry Notification (PIN) alerting U.S.-based companies and law enforcement agencies about the rise in fraudulent Emergency Data Requests (EDRs) used by cybercriminals. While not a new tactic, cybercriminals have started using them again. EDRs are urgent requests for sensitive user data, typically reserved for life-threatening situations, bypassing the standard warrant process. Hackers exploit this by posing as legitimate law enforcement officers and tricking companies into releasing private user data. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.