The most dangerous person to your network security may be sitting in the next cubicle, or working for a trusted vendor. This is called the Insider Threat. It is more likely that your computer incident will come from the inside of your organization than from a cyber-criminal gang in the Russian Federation. A couple of email newsletters dropped into my inbox with new examples of insiders who became threats.
There has been a lot in the press about ransomware this year. Crypto-ransomware attacks are becoming more targeted and sophisticated, resulting in bigger extortion amounts and other financial losses to the victims.
But last year’s most frequent and expensive cyber-crime is still email account compromise, or what the FBI calls Business Email Compromise (BEC) is still with us. The attackers using this exploit have also become more sophisticated.
A ...
Continue Reading →
Your Personally Identifiable Information (PII) is one of the top targets of cyber-criminals. This information is valuable because it can be used for identity, fraud, tax refund fraud, loans and credit card applications, money transfers, phishing and spam campaigns, blackmail and extortion, fraudulent medical insurance claims, online shopping, and so much more. This information is packaged and sold on the Dark Web, and ...
I hate robocalls. I got rid on my land line phone because the ONLY people who called me on it were robocallers, fraudsters, and political campaigns (more fraudsters?). Now up to 80% of my cellular phone calls are robocalls. If it seems that there are more robocalls then ever, this is not an illusion. Robocalls have increased 46% from 2017 to 2018, and ...
A quick Saturday digest of cybersecurity news articles from other sources.Original release date: October 4, 2019
The Microsoft Threat Intelligence Center (MSTIC) has released a blog post describing an increase in malicious cyber activity from the Iranian group known as Phosphorus. These threat actors are exploiting password reset or account recovery features to take control of targeted email accounts.
In a 30-day ...
Continue Reading →
One of my clients was the victim of a cyber-crime, and I reported it to the FBI’s Internet Crime Complaint Center. Today I will discuss how the process worked.
My client called me to help her after someone posing as her intercepted a payment on an invoice that she sent to one of her customers. The way this worked is that some time in the past, her business email account had been ...
Continue Reading →
You might have heard that the founder of Twitter, Jack Dorsey, recently had his Twitter account hijacked. You are probably wondering how a tech-savvy founder of a technology company could possibly lose control of his account at his own company. Personally, I can’t think of anything more embarrassing. It turns out the culprit was his phone. Specifically, the SMS texts that ...
A quick Saturday digest of cybersecurity news articles from other sources.Under the overarching theme of ‘Own IT. Secure IT. Protect IT.’, the 16th annual National Cybersecurity Awareness Month (NCSAM) ...
Continue Reading →
Is your company moving operations to the cloud? What about the cybersecurity aspects of protecting your data assets in the cloud? Are you relying on your partner/vendor to take care of securing your information? In light of the Paige Thompson indictment, it is apparent that relying too heavily on your vendor’s expertise and staff can open you ...
There is a very realistic spoofed phishing email making the rounds that looks so close the the real Microsoft alert email, as to be almost undetectable. They even spoof the legitimate sender address of “account-security-noreply@accountprotection.microsoft.com”. So even if you are looking for signs of chicanery, it will be difficult for most users to tell it is fake. See an example below.
