Entries by wpengine

Breach You Once? Shame on You. Breach You Twice? Still…Shame on You.

Heed the warning found in the story of a Virginia bank that was not breached once, but twice in an 8-month period of time! While we’re all aware of the potential risks of cyber threats, most organizations think it will never happen to them… let alone, more than once. The story of The National Bank of Blacksburg, in […]

When Ransomware Attacks Triple, You Need to Pay Attention!

Security vendor SonicWall just released their latest report on cyberattack volumes… and the numbers are staggering. We’re constantly hearing stats citing the increase in the number of attacks, malware variants, and the cost to organizations. The attention-getting stats you need to be aware of are those that are 2018 year to date: 2 million Ransomware attacks (a 299% […]

You Can’t Afford a Data Breach – And They’re Only Getting More Expensive

Companies face the constant, rising threat of data breaches each year, but the cost of a breach differs for every organization. The industry data available today provides valuable context for organizations looking to understand where to place their focus, budget, and efforts. Executives and IT teams alike are keenly aware of the need for cyber-security […]

Phishing Epidemic: Emotet Infections Costing Orgs Up to $1 Million Per Incident

US-CERT alert sounds the alarm on Emotet, one of the most costly and destructive malware strains currently active. Key DetailsWhat’s happening? On July 20th, the United States Computer Emergency Readiness Team (US-CERT) issued an alert highlighting the destructive qualities of Emotet, an extremely active banking trojan that has hit state and local governments particularly hard. What is Emotet? A […]

Massive Downtime Caused By Bad Guys Killing Bank’s 9,500+ Systems

A cyberattack against Banco De Chile (BDC)—that country’s largest financial institution—bricked a hair-raising 9,000 workstations and 500 servers. However, killing these machines was actually just to a cover trying to hide illegal transactions on the SWIFT network where banks transfer funds internationally. After the dust settled, $10 million was funneled off to accounts in Hong […]

Why Preventing Social Engineering Isn’t Enough

The heightened state of cyber-attacks in recent years has put a lot of focus on preventing those attacks from being successful. But, organizations can’t simply rely on defensive strategies to stay secure. Prevention within a security strategy is largely about putting up defenses that watch and wait for an attack – looking for actions, patterns, […]

$94K Business Email Compromise Goes Unnoticed, then Unreported

One might think that a large wire transfer from a state office would be quickly noticed. But not necessarily. A cybercriminal using BEC (business email compromise, also known as CEO Fraud) was able to steal close to $94,000 in public funds from the Massachusetts Clean Energy Center and go undetected for over a month. Worse yet, […]

Phishing Attacks Make Mortgage Wire Fraud Easier

The stress of obtaining a mortgage has just gotten worse, thanks to cybercriminals trying to con you out of your money. In new attacks targeting companies involved in the mortgage lending process, cybercriminals have found a lengthy, but very sneaky way to commit wire fraud at a time when tensions are high, and the victim […]

What Is Angler Phishing and How Do I Avoid Becoming a Victim?

In an ongoing campaign to clean up their massive hack Experian came out with this useful post: What is Angler Phishing? Angler phishing is the practice of masquerading as a customer service account on social media, hoping to reach a disgruntled consumer. About 55% of such attacks last year targeted customers of financial institutions, trying to lure victims into […]