Category: Social Engineering

“Malvertising” Scams on Facebook Business Accounts from Vietnamese Cybercrooks

Posted on September 4, 2023September 4, 2023 By SEN Producer No Comments on “Malvertising” Scams on Facebook Business Accounts from Vietnamese Cybercrooks

The report from The Hacker News reports on several attack variants, including those using Ducktail malware: “The actors behind Ducktail, for instance, leverage lures related to brand and marketing projects to infiltrate individuals and businesses that operate on Meta’s Business platform, with new attack waves employing job and recruitment-related themes to activate the infection.” In…

Malvertising, Social Engineering

Focus on “Cybersecurity Culture” to Fight Social Engineering Attacks

Posted on September 2, 2023September 2, 2023 By SEN Producer No Comments on Focus on “Cybersecurity Culture” to Fight Social Engineering Attacks

The Chief Evangelist for KnowBe4 Inc., provider security training and simulation services, makes a useful point about the inadequacy of cybersecurity software in a company where employees do not have the culture to identify and avoid social engineering attacks. He suggests several steps, starting with: “1. Assess Your Cybersecurity Culture Understand whether your employees value cybersecurity….

Cybersecurity Culture, Social Engineering

Okta Customers Hit by Social Engineering Attacks

Posted on September 1, 2023September 1, 2023 By SEN Producer No Comments on Okta Customers Hit by Social Engineering Attacks

The access management provider has issued a report on the attacks: “In recent weeks, multiple US-based Okta customers have reported a consistent pattern of social engineering attacks against IT service desk personnel, in which the caller’s strategy was to convince service desk personnel to reset all Multi-factor Authentication (MFA) factors enrolled by highly privileged users….

Social Engineering

Feds Provide Guidance on Social Engineering in the Healthcare Industry

Posted on August 31, 2023August 31, 2023 By SEN Producer No Comments on Feds Provide Guidance on Social Engineering in the Healthcare Industry

The guidance comes from a report entitled “Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients,” from the US Department of Health and Human Services and its advisory group. It includes information social engineering and healthcare. See the report here. The information will seem basic to many IT security professionals, but it’s likely helpful to many…

Healthcare, Social Engineering

Are Your Employees Unwittingly Interacting with Social Engineering Attacks On Collaboration Platforms?

Posted on August 30, 2023August 30, 2023 By SEN Producer No Comments on Are Your Employees Unwittingly Interacting with Social Engineering Attacks On Collaboration Platforms?

This interesting report covers increasing social engineering attacks on major collaboration platforms, noting the impact of the recent “Midnight Blizzard” attacks on Microsoft Teams. Read the article here. “‘As companies adopt new types of collaboration technologies, they don’t really think about security first or know what the risk might be until there’s some kind of…

Impersonation, Social Engineering

Scareware

Social engineering scareware is a type of social engineering attack that uses fear to trick victims into downloading or purchasing malicious software. Scareware attacks often involve pop-up ads or emails that claim that the victim’s computer is infected with a virus or other malware. The ads or emails may also claim that the victim’s personal…

Google Workspace to Enable Customers to Require Two Admins to Sign Off on Critical Account Changes, Making Social Engineering Attacks More Difficult

Posted on August 26, 2023August 26, 2023 By SEN Producer No Comments on Google Workspace to Enable Customers to Require Two Admins to Sign Off on Critical Account Changes, Making Social Engineering Attacks More Difficult

“‘Once it’s been implemented, when an admin initiates a highly sensitive action like a 2SV settings change, any other admin can approve,’ Google Workspace Director of Product Management Andy Wen told BleepingComputer.” Read the report here. The move will support enterprises increasing their efforts against social engineering scams such as phishing and lower the risk…

Phishing, Social Engineering

Cyber & Wire Fraud Common in Mortgage Settlement Process

Posted on August 23, 2023August 23, 2023 By SEN Producer No Comments on Cyber & Wire Fraud Common in Mortgage Settlement Process

Fraud, much of it involving social engineering, is common in the mortgage process according to a survey of almost 50,000 mortgage settlement agents. 20% said over the last year they’d been victims of wire fraud or attempted cyber fraud to intercept bank proceeds and 31% said they’d seen fraud in someone else’s transaction. “These survey…

Social Engineering

ICYMI: World’s First Celebrity Social Engineer Dies

Posted on August 19, 2023August 19, 2023 By SEN Producer No Comments on ICYMI: World’s First Celebrity Social Engineer Dies

Kevin Mitnick gained attention in the 1980s for his hacks, back when there was little competition for the crown of super hacker. Convicted on charges related to cyber crimes in the late 1980s,he couldn’t resist hacking the phone company once on supervised release. When the government issued an arrest warrant for that penetration, Mitnick fled…

Social Engineering

Small Businesses Especially Hard Hit by Social Engineering Attacks

Posted on August 18, 2023August 18, 2023 By SEN Producer No Comments on Small Businesses Especially Hard Hit by Social Engineering Attacks

The CNBC report includes disturbing stories of small business owners whose enteprises were devastated by social enginnering attacks. “’It’s especially damning for a small business, which has a pretty minuscule security budget compared to a General Electric or GM, which are running the best tools,’ said Greg Hatcher, founder of White Knight Labs. Companies with…

Social Engineering

Posts navigation

Previous 1 2 3 Next