What if there was a new phishing scam that had an open rate of 90%. That’s right, this phishing email is so believable, 90 out of 100 recipients open the the attachment or click on the link without a second thought.
These attacks begin with the scammer researching the target victim. These targets usually work at companies where there is a lot of air travel. ...
Continue Reading →We have discussed the dangers to what NIST identifies as Critical Infrastructure that exists because SCADA and other industrial control systems are designed to be run on “air-gapped” networks that are not connected to the public Internet. Unfortunately, many of these systems are being connected to the Internet, if only in a tangential way.
The German security firm OpenSource Security recently found hard ...
Continue Reading →
Russian cyber-criminals are hard to arrest, because there is no extradition treaty between the US and Russia. The Russian government allows them to prosper as long as they do not attack anything in Russia. The Russian government also contracts with these criminal groups when they need some state sponsored hacking done, a la Grizzly Steppe. In Russia, these guys are considered to be just very successful business men. They have ...
I use LastPass to manage all my passwords, and recommend LastPass to my clients and followers. Often, when I am talking about storing passwords in the cloud, as LastPass does, I get concerned questions about the safety of storing your digital “keys” online. What happens if LastPass is breached?
Well, the bad news is that they were breached around June 15, 2015. I remember getting the email alert from them at the ...
Continue Reading →
I will also be speaking at this event, also sponsored by First State Bank and Trust. This will be at the Stillwater Public Library, 224 Third St No, Stillwater, MN 55082, from Thursday May 4, 2017, from 8:00 am to 9:15 am.
Here is the EventBrite link.
Up to 95% of network intrusions are invited by ...
Continue Reading →
I will be the featured speaker at an event sponsored by First State Bank and Trust of Bayport, MN. The date is Tuesday May 23rd, 2017 from 6:00 pm to 7:15 pm. The location is Phipps Center For the Arts,109 Locust Street, Hudson, WI 54016
Here is the EventBrite link
Think you know how to recognize phishing emails? ...
Continue Reading →
A new exploit is using Microsoft Office documents to deliver malware. This is different from the reanimated macro exploits. If this exploit, the target will receive an Office document, such as a Word file, as an email attachment. Opening the attachment causes a malicious HTML application to be downloaded from the attackers C2 server. This is executed as an .hta file, disguised as an RTF file. The result is the ...
CAPTCHA, or Completely Automated Procedures for Telling Computers and Humans Apart, was a system first theorized by cryptographer Alan Turing in 1950. We find these little “I am not a robot” challenges popping up all over the place, especially when creating a new account, registering for a web service the first time, or sometimes as form of poor man’s two-factor authentication. ...
