Category: Cyber Security

WARNING: The List of Ransomware-Turned-Data Breach Operators is Getting Long

Seeing a better opportunity to generate more “revenue” from their victims, the idea of ransomware also exfiltrating data to be used to extort the payment is gaining steam.Ransomware started as little more than a nuisance, impacting just a few endpoints. Then the idea of spreading throughout a network to infect as many machines as possible […]

Pyongyang’s Phishing with Job Offers

An attack campaign with possible ties to North Korea’s Lazarus Group targeted aerospace and military companies in Europe and the Middle East with spear phishing attacks late last year, according to researchers at ESET. The campaign, which the researchers call “Operation In(ter)ception,” used social engineering attacks on LinkedIn to trick employees into opening malware-laden documents.“To […]

Prediction: Ransomware Attacks to Spike as Employees Return to the Office

Because of the nature of ransomware attacks and the mass numbers of workers at home, anti-malware vendor Emisoft believes we’re going to see a rise once work returns to normal.Ransomware is a numbers game: launch enough attacks and a percentage of them will return revenue back to you. This rings true regardless of whether attacks […]

Why People Don’t Learn (It’s Not Always Their Fault)

IT and security managers often fail to understand how well their employees actually absorb cybersecurity training, according to a survey from Mimecast and Forrester Consulting. The survey gathered responses from 120 senior IT and cybersecurity managers at companies in Australia, Hong Kong, New Zealand, and Singapore, as well as from 240 employees that worked within […]

Security Awareness is the Biggest Security Challenge for Remote Workforces

As the dust from enabling employees to work remotely has settles, new data from security vendor PulseSecure highlights where remote security has been – and still is – a challenge.COVID-19 has turned organizations upside-down, shifting priorities, budgets, and staffing – all in an effort to remain operational. But when making drastic changes to the way […]

It’s World Password Day 2020 – Is Your Organization Safe?

Today is World Password Day, a holiday created by Intel on the first Thursday of May to ensure everyone knows password best practices. “P@ssW0rd” has never been a safe password to use to protect your accounts… ever.There are best practices to keep in mind when creating passwords. Here are a few of our personal favorites:Keep […]

COVID-19 Security Hints & Tips Email Templates In 10 Additional Languages

KnowBe4’s Product Content team is happy to announce that their 9 COVID-19 Security Hints and Tips email templates are now available in 10 additional languages.The new emails are available in:German (DE-DE)French – Canada (FR-CA)French – France (FR-FR)Japanese (JP-JP)Dutch (NL-NL)Portuguese – Brazil (PT-BR)Spanish – Latin America (ES-LA)Spanish – Spain (ES-ES)Simplified Chinese (ZH-CN)Traditional Chinese (Hong Kong) (ZH-HK)These […]

Cybercriminals Lean Heavily on Social Engineering Tactics to Gain Access to Bank Accounts

A series of attack anecdotes shared by Brian Krebs shows how persistent and sophisticated scammers are in using social engineering tactics to gain access to their victim’s bank account details.It all starts with a bit of information about their next potential victim; using credit card records for sale on the dark web, scammers begin all […]

Fake Zoom Downloader is the Latest Method of Attack on Remote Workers

Riding on the coattails of the massive rise in popularity in the video conference solution, remote workers new to Zoom need to be wary of where they download the installer.We’ve written before about the various types of Zoom-related attacks that have sprouted up over the last two months. The latest chapter in this saga involves […]