Phishing Awareness

Phishing Scams Don’t Always Arrive by Email

by Brad | Sep 19, 2019 | Phishing Awareness

When you hear the word phishing, you probably think of email. And that’s exactly what the scammers want you to think so you won’t pay attention to their latest delivery mechanism: voicemail.

Phishing is generally an email that looks real, but isn’t, in an effort to get you to do something you shouldn’t. Now, fraudsters are using deepfake technology to generate audio that sounds real, but isn’t, in an effort to get you to something you shouldn’t. And that’s exactly what scammers did to the CEO of a German energy company.

(more…)

A Big Part of the Phishing Problem is You

by Brad | Sep 17, 2019 | Phishing Awareness

The days of a hacker sitting alone at their computer screen in a dark room probing for network vulnerabilities is a thing of the past. That’s too much work. To penetrate networks today, hackers almost always enlist the help of an inside accomplice: you.

What hackers have discovered over the years is that it’s much easier to get unsuspecting humans to help them in their endeavour. This was confirmed by research and published in Proofpoint’s Human Factors Report 2019. From the report, “Over 99% of emails distributing malware required human intervention—following links, opening documents, accepting security warnings, and other behaviors—for them to be effective.”

(more…)

How to Stop Spam From Ending Up in Google Calendar

by Brad | Sep 7, 2019 | Phishing Awareness

A lot of people use a web-based calendar to track all of their comings and goings. It makes sense. A web-based calendar is a smart way to make sure you have access to your calendar no matter where you are. And one of the most popular calendars in use today is Google Calendar. But, I’ll bet you didn’t realize that Google Calendar can be a giant repository for spam.

(more…)

The Privacy Tool Used to Phish You

by Brad | Aug 27, 2019 | Phishing Awareness

With email security, it’s a never ending cycle of attacks and counterattacks. Whenever the bad guys come up with some clever new way to scam people, the good guys eventually figure out a way to combat it. If only that were the end of the story.

Unfortunately, it really is a never ending cycle. So, whenever the good guys come up with a counter move, the bad guys immediately jump on it and figure out some way to use that counter move in their next scam. Such is the case with two factor authentication (2FA).

(more…)

When is a 404 Error Page not an Error Page? When it’s a Phishing Page!

by Brad | Aug 23, 2019 | Phishing Awareness

If you’ve been on the Internet, then you’ve run into a 404 error page. According to Lifewire, “a 404 error is an HTTP status code that means that the page you were trying to reach on a website couldn’t be found on their server. To be clear, the 404 error indicates that while the server itself is reachable, the specific page showing the error is not.” The server’s there but the page isn’t.

(more…)

Seriously—Now a Phishing Attack Can Make You Deaf

by Brad | Aug 21, 2019 | Phishing Awareness

There used to be a time when the worst thing that could happen to you from a phishing attack was a financial loss. Maybe the hackers stole your credentials, got a credit card in your name and went on a shopping spree. Or, maybe they used ransomware to encrypt your hard drive and insisted on some Bitcoins before you could get your data back. At least there was no threat of bodily harm. Until now.

(more…)

What to do If You’re Hit by Ransomware – Part 2

by Brad | Aug 7, 2019 | Phishing Awareness

As we mentioned in Part 1, when it comes to dealing with ransomware, you basically have three choices: pay it, don’t pay it or avoid it in the first place by deploying anti-phishing software.

Naturally, here at Phish Protection we think you should be proactive and use our inexpensive and easy-to-deploy cloud-based phishing protection with Advanced Threat Defense to avoid it in the first place. But, what if it’s too late? What if you’ve already been hit by ransomware?

(more…)

Protection From Phishing: A Growing Threat In Today’s Information Age

by Brad | Jul 24, 2019 | Phishing Awareness

The rapid transformation of the cyberspace and digital technologies in recent times have necessitated changes in an enterprise’s digital architecture. Adversaries these days make use of highly sophisticated techniques and advanced digital platforms to attack enterprises and individuals. One of these techniques employed by cybercriminals is ‘Phishing.’

Phishing is a type of online fraud, which makes use of deceptive e-mails, website, or pop-up ads. It involves a technique known as social engineering which consists of throwing a bait towards the intended victim (usual employees of an organization) and luring them to reveal his private information or user credentials. This information can further be used to compromise the financial assets and data of the organization.

(more…)

Phishing Attacks Depend Heavily on New Top Level Domains

by Brad | Jul 17, 2019 | Phishing Awareness

When the Internet first began, there were just a handful of top-level domains in use. Top-level domains (TLD) are the letters that come after the “dot” in the URL. Examples include .com, .org and .net.

One of the most-used phishing tactics is domain name spoofing. Domain name spoofing occurs when an attacker uses a domain, that at first glance, looks legitimate, but isn’t because the attacker substituted one or two letters in the domain.

(more…)

A Really Dumb Way to Protect Yourself from Phishing Attacks

by Brad | Jun 18, 2019 | Phishing Awareness

I have to admit, what I’m about to share with you will save you a few bucks.

There are a lot of ways to protect yourself from phishing attacks. There’s awareness training, endpoint security and real-time, cloud-based link scanning, to name a few. The problem with all of these is that they cost money. Not a lot of money, but money nonetheless.

(more…)

This Fall Season, Beware of Phishing Attacks

by Brad | Jun 10, 2019 | Phishing Awareness

As the holiday season approaches and shoppers plan to spend more on online purchases buying toys, gifts, clothes, etc. for the loved ones, the Cyber criminals become more active during this time of the season trying to lure the online buyers into stealing their banking and credit card information. According to various reports published, October month is dangerous for organizations as attackers come out of their cave in search of prey. Email addresses, phone numbers, account numbers, and login credentials, are all akin to gold for the hackers. It has been proven by the reports that phishing is the top attack vector in multi-vector attacks.

(more…)

Biggest Phishing Attack Risk: It Can’t Happen to Me

by Brad | Jun 4, 2019 | Phishing Awareness

Some people just refuse to put the seatbelt on when they get in their car. An act that takes about two seconds. It’s a lot of protection—perhaps lifesaving—for a little bit of time and effort. And it’s not like they’re unaware of seatbelts or the protection they provide. I guess they just assume that when it comes to getting into a wreck, it can’t happen to them.

(more…)

How Using Anti-Phishing Email Templates to Train Your Employees Can Help Avoid Phishing Attacks

by Brad | May 22, 2019 | Phishing Awareness

Phishing is among the most common types of cyber-attacks that take place these days and is preferred by cyber-criminals for stealing sensitive and confidential user data. Such data may include valuable personal information such as login credentials, credit card details etc. which can cause severe personal or financial damage if it falls in the wrong hands.

(more…)

Latest Phishing Vulnerability Confirms Awareness Training is Insufficient

by Brad | May 8, 2019 | Phishing Awareness

Phishing prevention that primarily depends on awareness training is doomed to fail. That’s the implication of the latest research conducted at Ruhr University Bochum and Münster University of Applied Sciences

A team of researchers discovered several vulnerabilities in two technologies used for email authentication and verification: OpenPGP and S/MIME. The vulnerabilities could allow attackers to spoof signatures on over a dozen popular email clients including Microsoft Outlook and Apple Mail. (more…)

Inception the Movie is Now an Undetectable Phishing Method

by Brad | Apr 30, 2019 | Phishing Awareness

Cyber expert James Fisher discovered a new phishing method he calls the “inception bar.” He named it after the movie Inception, and just like the movie, the phishing method traps you in a fake reality. You can see an example of how it works on his website.

He discovered the exploit in Chrome for mobile, confirming what we already know: mobile is the number one threat target going forward.

(more…)

Instagram More Popular Than Facebook: Guess Where the Hackers are?

by Brad | Apr 22, 2019 | Phishing Awareness

Willie Sutton had a famous response when asked why he robbed banks: “Because that’s where the money is.” Hackers seem to be following Willie’s advice. When it comes to phishing attacks, hackers go where the people are. And as Instagram catches up in popularity to Facebook, it’s become the go-to destination for hackers looking to exploit victims via phishing attacks.

(more…)

Phishing Protection for SMBs: The Good News and Bad News

by Brad | Apr 2, 2019 | Phishing Awareness

If you run a small or midsize business (SMB) and you’re concerned with phishing protection, there was a lot to read in the news last week. Let’s get the bad news out of the way.

According to an article on Security Week website, Karl Racine, attorney general for the District of Columbia introduced a new bill, the Security Breach Protection Amendment Act of 2019. The bill expands the types of information companies are held accountable for.

(more…)