Every year about this time, cyber-criminal groups start to ramp up for the annual income tax fraud season. As we enter tax season, its good to remember the following tips to ensure your tax refund is not claimed by a scam artist.
There is a new tool available to all of us this year. Anyone can, and should, for ...
Continue Reading →
A quick Saturday digest of cybersecurity news articles from other sources.Tired of the doom and gloom? Although 2020 has been filled with many unfortunate events like the coronavirus pandemic, there have been some positive business developments. Here are three of them.
Remote work will lead to more phishing attacks ...
Continue Reading →
A new year brings new phish.
Catch of the Day: Mailjet Phish
Chef’s Special: Facebook Messenger Phish
Examples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.
I would be delighted to accept suspicious phishing examples from you. Please forward your email to phish@wyzguys.com.
My ...
Continue Reading →
Password theft – One of the easiest exploits for a cyber-criminal may be the one of the worst for the victim. The recent SolarWinds disaster (yes it is a disaster, not just hyperbola) began when a Russian cyber-ops group discovered the password to the SolarWinds update server was “protected” by the password SolarWinds123. This password is easily guessable and a terrible choice for a critical system such as an update ...
What if you could eliminate 95% of cybersecurity exploits by doing one thing better? Would you do it? Social Engineering in its many forms accounts for 95% to 99% of common exploits that cybercriminals use to gain initial access to your information assets. There are two simple security controls that you can put in place that would virtually eliminate the threats caused by social engineering.
Social engineering is the use of ...
Continue Reading →A quick Saturday digest of cybersecurity news articles from other sources.Original release date: October 9, 2020
Note: the analysis in this joint cybersecurity advisory is ongoing, and the information provided should not be considered comprehensive. The Cybersecurity and Information Security Agency (CISA) will update this advisory as new information is available. This joint cybersecurity advisory was ...
Continue Reading →Catch of the Day: Web Form Phish
Chef’s Special: Voice Mail Phish
Examples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.
I would be delighted to accept suspicious phishing examples from you. Please forward your email to phish@wyzguys.com.
My intention is to provide a warning, ...
Continue Reading →
What if your computer, your cable or DSL modem, your smartphone, or an IoT device is infected with malware? How would you know? Malware is designed to be difficult to detect, once an attacker has possession of your system they do not want to reveal their presence. In today’s article we will provide some tips and solutions to detecting and eradicating a malware infection.
What are the signs that your device ...
Continue Reading →
Apple products, such as the iPhone, iPad, and Macbook are NOT immune from successful attack and exploitation. Why? Because the weakest part of Apple security is the user behind the keyboard. That’s right, it’s YOU!. Email and website based attacks work the same for Apple users, Windows users, and even Linux users. Send a well-crafted phishing email, and wait for the target ...
A quick Saturday digest of cybersecurity news articles from other sources.Original release date: July 16, 2020
This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) and Pre-ATT&CK frameworks. See the MITRE ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques.
Attributing malicious cyber activity that uses network ...
Continue Reading →