Accessibility links

Dots and Dashes Aim To Steal Your Login Credentials

Scams & Phishing

Dots and Dashes Aim To Steal Your Login Credentials

What do hackers do in their spare time? They create jigsaw and other types of puzzles to hide their various attacks. That’s according to recent Microsoft reports, anyway. The software giant’s Security Intelligence team has stated it saw that in a recent attack, an “HTML attachment is divided into several segments, including the JavaScript files used to steal passwords, which are then encoded using various mechanisms…” But wait! There's even more! READ FULL STORY

Scams & Phishing

Resurfaced Facebook Scam Promises To Help You Lose Weight Without Exercise
May 20, 2022

Many of us have likely gained the COVID-19 pounds or some weight over the past year. Scammers on Facebook are taking advantage of those of us wanting to shed the extra bacon. A scam that has actually been around for many years is resurfacing. You may have seen it forwarded to a friend’s Facebook wall, or perhaps you were tagged. It purports to help you shed those cookies faster than you can fry an egg…like 20 pounds in 25 days! Yep, that is fast. READ FULL STORY

Credential Swiping Attacks Target 45% Of Office 365 Users

Corporate Security

Credential Swiping Attacks Target 45% Of Office 365 Users

As corporate hacks become daily events, most users don’t realize that as a result, bits and pieces of their identities are available on the dark web. Their PII is listed for sale or for free to hackers, and they’re the only ones who know what they’ll do with that information. A study by Cofense found 45% of credential swiping targets use Outlook, Teams, and Office 365 as email phishing lures. With approximately 115 million Microsoft Teams users, cybercriminals know Office 365 is a very ripe target. READ FULL STORY
Emotet Banking Malware Up 375% Now Targeting Weak Passwords

Your Security

Emotet Banking Malware Up 375% Now Targeting Weak Passwords

It looks like Emotet malware may be coming to a Wi-Fi network near you. Discovered in 2014 as a banking Trojan, Emotet’s malware growth has been aggressive. In the “2020 State of Malware Report,” Malwarebytes found that not only has Emotet been expanding its capabilities over time, attacks jumped 375% in 2019. As the banking Trojan that first aimed at stealing only financial data, Emotet has added stealing personal data, ransomware, and botnets to its growing menu of malware. And now, its brute force attacks against weak Wi-Fi passwords are making headlines for good reason. READ FULL STORY
Can Hackers Take A Bite Out Of Your Mobile Pay Solution?

Mobile Security

Can Hackers Take A Bite Out Of Your Mobile Pay Solution?

With the many digital payment options available today, finding the most secure providers can be a challenge. The popularity of digital wallets has grown over time and writing checks and even using plastic cards for payments are quickly becoming the dinosaurs of our non-digital past. Many users now own mobile wallets and pay for goods and services. And using Apple Pay, Google Pay or another service for those transactions may offer peace of mind knowing your payment data is safe and out of the reach of hackers. READ FULL STORY

Scams & Phishing

CAPTCHA Used as Bait For Growing Number Of Email Scams
May 16, 2022

Most of us are familiar with the funky CAPTCHA verification window that occasionally pops-up when signing onto a website. CAPTCHA systems lend a level of credibility to those of us asked to verify online that we’re human and not a bot. Seeing it makes us feel better about the site being more secure than others. After all, only a 100% legitimate website or service would dare use CAPTCHA, right? Wrong. This now Google-owned service has become a favorite bait for scammers who want you to believe they’re legitimate, and it’s working big-time. READ FULL STORY

Homoglyph Attacks Show What You See May Not Be What You Get

Scams & Phishing

Homoglyph Attacks Show What You See May Not Be What You Get

Not the easiest word to pronounce or spell, homoglyph attacks continue to be widely used by fraudsters intent on stealing your PII. Homoglyphs use characters in a domain name that look like what they’re supposed to be, but they’re not. Cybercriminals use characters from English and other languages to create sneaky, but fake domain name spellings, all with the goal of stealing your PII from a bogus website. Hackers count on users not noticing the homoglyph in order to be successful, and now these attacks are easier to pull-off than ever before. READ FULL STORY
Fake Apple Apps Scamming Many; How To Avoid It

Scams & Phishing

Fake Apple Apps Scamming Many; How To Avoid It

Fake apps have been an ongoing problem for the official Apple App Store. With nearly 1.8 million apps in their Store, Apple estimates making $65 billion a year from the apps alone. They also have a dedicated “Discovery Fraud Team” and technology to keep scam apps out. But, they still find a way of sneaking in. A Washington Post report found that out of Apple’s 1,000 highest-grossing apps, nearly 2% are some type of scam. Many fake apps can deliver malware to a device, but others are just looking to make a quick buck with financial scams. READ FULL STORY
Malware On A USB Stick Coming To A Mailbox Near You

Scams & Phishing

Malware On A USB Stick Coming To A Mailbox Near You

The FBI issued a warning to be careful where you stick that USB stick. According to recent reports, the FBI is aware of a financially motivated group of cyber criminals who are sending out malware infected USB sticks in the mail or having them delivered by the United Parcel Service (UPS). Packages were sent to companies in the transportation and insurance areas at the end of 2021. Recently, the U.S. Defense industry was targeted. The particular sticks of concern contain “BadUSB” or “Bad Beetle USB.” READ FULL STORY
New Sugary Ransomware-as-a-Service Targets Individuals

Your Security

New Sugary Ransomware-as-a-Service Targets Individuals

A cyberthreat team at Walmart recently discovered a new ransomware type they dubbed “Sugar.” In this case, when malware is rented and then used against an individual or group, it’s called ransomware-as-a-service (RaaS). One of Sugar’s most interesting characteristics is that it targets individual devices and not an entire company network. With this ransomware discovery so new, we know Sugar is a RaaS we’ll learn more about in the near future thanks to the Walmart team’s discovery. READ FULL STORY
SMBs And Cybersecurity: Building A Strong Plan From The Ground Up

Corporate Security

SMBs And Cybersecurity: Building A Strong Plan From The Ground Up

The data breach headlines normally focus on mega breaches involving huge corporations and their many customers. The reality is, many small-to-medium sized businesses (SMBs) suffer data breaches that don’t make the headlines, but are still an epic security event for the enterprise and its customers. From ransomware attacks to other malware infections, each SMB has a need for their own customized data security plan. A solid security program begins with building from the ground-up or re-tooling an already existing plan. READ FULL STORY
There Is Plenty Of Phishing On Online Apps--Don't Get Hooked

Mobile Security

There Is Plenty Of Phishing On Online Apps--Don't Get Hooked

A recent documentary aired on subscription streaming service, Netflix, that highlighted how difficult it is to detect when someone is trying to take advantage of human nature and kindness. You may have seen it. It has been discussed on various media and it may be difficult to watch. But it is yet another example of how criminals use social engineering and trust to get what they want. One interviewee tells the story of how she met a guy that matched and swept her off her feet and swept her bank account clean. READ FULL STORY
Typosquatting And Fake Pop-ups Detailed

Security Education Videos

Typosquatting And Fake Pop-ups Detailed

Cyber criminals continue to update how they target and attack people and organizations.  In this video you will learn about ransomware, a favorite of cyber criminals and a common way systems become infected.  In addition, you will learn about new cyber extortion techniques that will become far more popular in the near future. With a little research and a cautious approach to links and attachments, chances are you can avoid being a victim of cybercrime. READ FULL STORY
Keeping Your Bank Account And Credit Cyber-Smart

Education

Keeping Your Bank Account And Credit Cyber-Smart

Financial institutions and hacking go hand-in-hand. Hacking banks and their account holders is the most direct cash infusion a hacker can get…and they know it. According to Kaspersky Lab, attacks on ATMs alone hit an all-time high in 2017 with malware-as-a-service (MAAS) opportunities. With this service, even hacking “hacks” who have no cybercrime experience can watch an instructional “how to” video on how to target an ATM successfully. Guarding our finances with common sense protection is something we all need to do. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.