Phishing

Phishing technique: Message from the boss

Is it possible for you to ignore an email sent by your boss? Phishers believe that you probably would not, and this is the reason they are getting better at

Cyber Work podcast: Email attack trend predictions for 2020

Introduction In this episode of Infosec’s Cyber Work podcast series, host Chris Sienko chats with Evan Reiser, CEO of Abnormal Security. They discuss where e

Phishing techniques: Clone phishing

Trust is an important part of any relationship and once it has been established, you can generally ignore any kind of vetting you have to do for the person.

Phishing attachment hides malicious macros from security tools

A clever new wave of phishing attacks prove malicious, macro-enabled attachments can still bypass security tools and pack a serious punch under the right conditions. The attacks, recently spotted by researchers at FireEye, targeted financial services organizations in the United States, tricking them to download and deploy a backdoor giving attackers full control of the victim’s environment.

Phishing techniques: Asking for sensitive information via email

Introduction Email has been a critical part of our everyday communications since the 1990s. Thanks to its affordability and ease of use, email allows users t

PayPal credential phishing with an even bigger hook

With the increased adoption of multi-factor authentication, login credentials alone may not be enough for scammers to gain the access or information they’re after. Learn how credential phishing is evolving and what you can do to keep employees and your organization secure.

Your 2020 tax scam training guide

Get your W-2s and returns ready because tax season is on the way! As if deductions, exemptions and return distribution wasn’t enough, tax season becomes open season for cybercriminals hunting for sensitive information, credentials and even a direct deposit of your employees’ tax returns.

Abusing email rules

Introduction For the average email user, setting up rules like automatic email forwarding is a harmless exercise. But for the individual whose role it is to

8 phishing simulation tips to promote more secure behavior

The goal of simulated phishing is to both prepare employees to spot real attacks while also encouraging them to report suspicious emails to your security team. To help you strike this delicate balance, we put together our top eight phishing simulation tips perfect for anyone trying to refine their strategy or even launch their very first simulated phishing program.