In the past, we’ve talked about phishing emails that contain a hyperlink to malicious websites. Traditionally, these are identifiable through boxes, buttons or phrases within the email. When you move your cursor over them, the cursor changes to the hand and displays the content of the URL. This week’s sample email represents an old but …Read more
I’ve covered the use of social media in social engineering attacks a number of times. Statistically, social media continues to be a starting point for crafting elaborate social engineering or phishing attacks. Let’s run through a refresher. Sharing too much private information on social media is dangerous. If you’re not sure what to share, follow …Read more
We have talked about phishing emails containing a hyperlink to malicious websites. Traditionally, these are identifiable through boxes, buttons or phrases within the email. They are visually marked, and when you move your cursor over the link, the link changes to a hand and displays the content of the URL. However, there is another frequently …Read more
After being accused of numerous social media privacy violations, Apple responded on January 8 with a billboard on the side of the Las Vegas Convention Center: “What happens on your iPhone, stays on your iPhone.” But is it true? It is until it isn’t. Let me explain. Both Apple and Google operating systems …Read more
The “tech support” scam has been around for well over 10 years. Although the look and media have changed, the scam has fundamentally stayed the same. If you remember five to six years ago, fraudsters masked themselves as Apple® support. Technology progression (i.e., Voice over IP) makes thieves’ job easier as they can now spoof …Read more
“The devil is in the details,” or so they say. Today I want to explain a technique that serves absolutely no legitimate purpose other than a malicious one: double extension. In the Microsoft® Windows® world the file extension is critical as it indicates which program will open the file. For example, document.doc will be opened …Read more
The primary goal of social engineers is to make us curious or fearful because that is when we are most vulnerable. They use many tactics: Spoofing a sender in emails and utilizing familiar content are two of their favorites. One of the most common attributes of phishing attacks is a sense of urgency. By nature, …Read more
Are you familiar with macro-enabled attachments? It’s a form of phishing and has some interesting attributes of which you should be aware of. If you ever receive an email with the introduction “Greeting, dearest customer,” you should delete the email immediately. The punctuation, poor grammar and lack of proper spacing instantly reveal it’s a crudely …Read more
The big brokers are making big news on a number of fronts ranging from expansion plans to technology plays. Here’s what you need to know about the big plans being formulated by the big guys: Compass Real Estate will be coming to the upscale Park Place office tower in Houston’s posh River Oaks District in …Read more
There’s not a day that goes by without hearing news about a security breach or incident involving large companies like Equifax and Marriot; but what about incidents that are rarely publicized but just as damaging? Wouldn’t you like to know if an incompetent vendor lost your email or other personal information? I would, and I …Read more