account hijacking Archives - WyzGuys Cybersecurity

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

AA20-283A: APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations

Original release date: October 9, 2020

Summary

Note: the analysis in this joint cybersecurity advisory is ongoing, and the information provided should not be considered comprehensive. The Cybersecurity and Information Security Agency (CISA) will update this advisory as new information is available. This joint cybersecurity advisory was ...

Continue Reading →

17
OCT

0

Share

account hijacking, ransomware, Weekend Update, Windows 10

vulnerability chaining

Friday Phish Fry

Phishing Email Alerts

Catch of the Day: Web Form Phish

Chef’s Special: Voice Mail Phish

Examples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.

I would be delighted to accept suspicious phishing examples from you. Please forward your email to phish@wyzguys.com.

My intention is to provide a warning, ...

Continue Reading →

16
OCT

0

Share

account hijacking, email, Friday Phish Fry, Phishing, social engineering

If You Connect It, Protect It – Part 2

What if your computer, your cable or DSL modem, your smartphone, or an IoT device is infected with malware? How would you know? Malware is designed to be difficult to detect, once an attacker has possession of your system they do not want to reveal their presence. In today’s article we will provide some tips and solutions to detecting and eradicating a malware infection.

What are the signs that your device ...

Continue Reading →

7
OCT

0

Share

account hijacking, Android, Apple, Computers and Internet, cybersecurity

NCSA

Guest Post – Apple Phishing Is an Escalating Threat

Apple products, such as the iPhone, iPad, and Macbook are NOT immune from successful attack and exploitation. Why? Because the weakest part of Apple security is the user behind the keyboard. That’s right, it’s YOU!. Email and website based attacks work the same for Apple users, Windows users, and even Linux users. Send a well-crafted phishing email, and wait for the target ...

Continue Reading →

21
SEP

0

Share

account hijacking, Apple, cybersecurity, email, Phishing

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

AA20-198A: Malicious Cyber Actor Use of Network Tunneling and Spoofing to Obfuscate Geolocation

Original release date: July 16, 2020

This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) and Pre-ATT&CK frameworks. See the MITRE ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques.

Attributing malicious cyber activity that uses network ...

Continue Reading →

1
AUG

0

Share

account hijacking, News and politics, passwords, Phishing, social engineering, surveillance, TOR, Weekend Update

ICS, SCADA, spoofing, tunneling, VPN

Surviving an Automated Sign-up Bot Email Bomb

I have a client who is the victim of an email bomb. She started receiving hundreds of mails from websites all over the Internet. Nearly all of them were the kind of subscription confirmation email you would get after signing up for a newsletter, forum, or other subscription service. When I say they came from all over, she ...

Continue Reading →

27
JUL

0

Share

account hijacking, email

DDoS, email bomb

Friday Phish Fry

Phishing Email Alerts

Catch of the Day: Netflix Account Grabber

Chef’s Special: A 4-pack of IONOS email account hijack attempts

Examples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.

I would be delighted to accept suspicious phishing examples from you. Please forward your email to phish@wyzguys.com.

My intention ...

Continue Reading →

12
JUN

0

Share

account hijacking, email, Friday Phish Fry, Phishing

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

Senate renews warrantless collection of web histories

Does all this COVID-19 related ruling by Executive Order give you the Constitutional willies? Well, the Legislative Branch is doing its best to keep pace in the race to see which branch of the government can violate our rights the most. The government can keep on surveilling your online ...

Continue Reading →

30
MAY

0

Share

account hijacking, authentication, law and policy, passwords, ransomware, Weekend Update

BEC, bot-net, extortion, managed service provider, Mirai, MSP, updates

What To Do If Your Social Security Number Was Stolen

The fact is, most of us had our Social Security numbers stolen three years ago, in the Equifax credit history breach of March 2017. But there are many other breaches where SSNs were taken along with other personally identifying information (PII). Your Social Security information can also be stolen from your mailbox, which is a crime, ...