SANS: Phishing Exploits Are The Top Threat

The SANS institute released the results of  a new survey recently, and found that cybersecurity professionals ranked phishing as the number one exploit this year.  Phishing awareness training programs were seen by many as the best defense against phishing, spearphishing and whaling exploits.  Something that was new this year was the reporting of so-called “malware-less” exploits that use “the built-in features of the operating system to turn it against itself without downloading ...

Continue Reading →
23
AUG
0

Computers and Internet, cybersecurity, Phishing, ransomware, Security, Spyware, Trojan

How Web Addresses Are Spoofed

One of the tactics that I am seeing more often is the clever use of web address spoofing in the web sites and landing pages used in phishing emails.  This sort of spoofing has been used successfully even against people who have been training to detect phishing emails, and to check link destinations (using the hover trick) and double check web addresses in the browser address bar.

Here are some techniques that ...

Continue Reading →
21
AUG
0

Computers and Internet, cybersecurity, Phishing, social engineering

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

 

IC3 Releases Alert on Gift Card Scams

08/02/2017 10:08 PM EDT Original release date: August 02, 2017

The Internet Crime Complaint Center (IC3) has released an alert warning consumers of music gift card scams. This type of scam targets victims, gains their confidence, and tricks them into providing gift card information.

To stay safer online, review the IC3 alert on Continue Reading →

19
AUG
0

cybersecurity, social engineering, Weekend Update, Windows 10

How Web Addresses Work

Most of us have been using web addresses for years without really understanding how they work.  Today we are going to try to demystify the web address for you.  Web addresses are basically “rented” for a period of time from a Domain Name Registrar, and are part of the Domain Name System (DNS).  DNS changes the easy alphanumeric domain names we use into numerical IP addresses that computers and web servers ...

Continue Reading →
18
AUG
0

cybersecurity, Phishing

, ,

Need a Personal Cyber Security Staff? Rubica May Be the Answer

I was recently introduced to a personal cybersecurity service called Rubica.  If you are looking for a company that can provide you and your family or your small business with the kind of cybersecurity operations that are available to larger companies, this may be for you.

A bad day for me starts with a client calling to say, “I was hacked,” or to hear that they have fallen prey ...

Continue Reading →
16
AUG
0

cybersecurity, encryption, Identity Theft

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

US-CERT: Alert (TA17-181A) Petya Ransomware

Systems Affected

Microsoft Windows operating systems

Overview

This Alert has been updated to reflect the National Cybersecurity and Communications Integration Center’s (NCCIC) analysis of the “NotPetya” malware variant.

The scope of this Alert’s analysis is limited to the newest Petya malware variant that ...

Continue Reading →
12
AUG
0

cybersecurity, malware, News and politics, ransomware, Weekend Update

How Hard Is It To Become A Cyber-Criminal?

According to a recent article on Naked Security, not at all hard.  While at Black Hat in Las Vegas, researchers from Sophos gave a presentation that dissected the “Philadelphia” ransom software as a service (SaaS) model.

Anyone can buy the Philadelphia ransomware kit on the Dark Web for $400.  And for this nominal investment, the would-be attacker gets a simple executable file that sets up the whole system automatically. ...

Continue Reading →
11
AUG
0

Computers and Internet, cybersecurity, Dark Web, malware, Phishing, ransomware, Security

Page 1 of 109 12345...»