Phishing Email AlertsExamples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.
I would be delighted to accept suspicious phishing examples from you. Please forward your email to phish@wyzguys.com.
My intention is to provide a warning, examples of current phishing scams, related articles, and education about how ...
Continue Reading →
The video conferencing application Zoom has had it’s share of security related problems lately. Any time they name a cyber-attack after you (Zoom bombing) it’s bound to be a bad thing. Zoom bombing, if you haven’t heard, is the video conference equivalent of photo bombing. Some miscreant sneaks into your meeting and takes over the screen to share some NSFW imagery or hate speech or cat videos. Zoom meeting videos have ...
A quick Saturday digest of cybersecurity news articles from other sources.Original release date: April 2, 2020
The Federal Bureau of Investigation (FBI) has released an article on defending against video-teleconferencing (VTC) hijacking (referred to as “Zoom-bombing” when attacks are to the Zoom VTC platform). Many organizations and individuals are increasingly dependent on VTC platforms, such as ...
Continue Reading →
Is your computer technology Managed Service Provider (MSP) the weakest link in your supply chain security program? Are they the easiest point of entry for an attacker? Your contracted tech support provider holds keys to your computer network that are coveted by cyber-attackers. MSPs are commonly targeted by cyber-criminal groups and other bad actors because MSPs ...
Here is a frightening twist on your typical domain name spoofing. Attackers have found ways to reuse legitimate sub-domains of well know business entities such as Microsoft and other companies to seed phishing email links with authentic sub-domains.
Anyone person or business that has a registered domain name can create any sub-domain they would like on the main domain that ...
Continue Reading →A quick Saturday digest of cybersecurity news articles from other sources.Sounds like cyber-war! Is it the Russians? Hackers are crawling all over the US Department of Defense’s websites – and DoD officials are quite happy about the whole thing. It’s pen-testing, baby.
Black Hills Information Security, and owner John Strand ...
Continue Reading →The FBI’s 2019 Internet Crime Report, came out February 25. Email account hijacking, or Business Email Compromise (BEC) is the top money maker for cyber-criminal groups, earning them an estimated $1.776 BILLION with a B. CEOs of companies are top targets for this exploit, and usually it begins with a phishing email.
Even though ransomware is the big noisy topic, in terms of dollar losses, it is not even in the top ten, although a lot of expenses and costs ...
Continue Reading →
The heart of a good scam is pretending to be someone you are not. This form of social engineering is known as the impostor scam or impersonation scam. Impostors can take different forms, and may show up on a phone call, or as an email from a trusted friend or family member, business associate, customer or coworker. Often ...
A quick Saturday digest of cybersecurity news articles from other sources.Next week, WyzGuys Cybersecurity Blog is having its own Scam Week, and will be focusing on scams we see happening to our clients all the time. A couple are listed below.
There’s an attachment that you are “strongly recommended to read” on account of coronavirus infections in your area. Don’t open ...
Continue Reading →
How can you have a domain lock or client transfer prohibited, and still lose your domain name to attackers? Domain lock was invented to prevent unauthorized parties from stealing your domain name. As reported by Brian Krebs on January 24, 2020, that happened to a well regarded service that helps Web sites detect and block fraud. They had a domain lock but ...