Theft via Instagram – just promise something “to good to be true”

Social Engineering and Email Cyber Security Training

Nothing complicated about this – a simple scam, abusing people’s trust to net $3m. Send a message, pretend to be someone you are not, provide a malicious link and promise the victim something “free”. Crooks steal NFTs ‘worth $3m’ in Bored Ape Yacht Club heist • The Register It could …

Zero-day security vulnerabilities exploited in 2021 – UPDATED 25 4 2022

Magnifying glass looking for a zero-day attack

This post was first made on 22 April 2022 I regularly write about the issues around the zero-day vulnerability and our Social Engineering and Email Cyber Security Training course aims to equip individuals and organisations to meet the challenge that the zero-day poses. Google’s Project Zero has reported on it’s …

Anatomy of a phishing email attachment – this is why we are always running training

Social Engineering and Email Cyber Security Training

SANS Internet Storm Centre has a couple of blog posts looking at the mechanics of a Word document and a PDF both of which are malicious payloads in a phishing email. This is what you are up against! Analyzing a Phishing Word Document – SANS Internet Storm Centre Simple PDF …

Yes people do track a top ten for malware. Do you want to know what the #1 is?

It’s Emotet – this is obviously where the cyber-criminals are making their money. Emotet reestablishes itself at the top of the malware world • The Register Emotet is operated by an operation called Cryptolaemus, and they have been developing the code to bring the malware back after it had been …