Saturday, December 14, 2019
  • Bitglass SASE wins Global 2000 enterprise
  • Automating Directory Services
  • This is finally the year of the ARM server
  • Improving and Automating Threat Intelligence for Better Cybersecurity
  • Litany of Bad Behavior At Bezos’ RING

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library
  • Home
    • Cybersecurity News
    • Features
    • Industry Spotlight
    • News Releases
  • Security Bloggers Network
    • Latest Posts
    • Contributors
    • Syndicate Your Blog
    • Write for Security Boulevard
  • Webinars
    • Upcoming
    • On-Demand
  • Chat
    • Security Boulevard Chat
    • Marketing InSecurity Podcast
  • Library

  • Analytics
  • AppSec
  • CISO
  • Cloud
  • DevOps
  • GRC
  • Identity
  • Incident Response
  • IoT / ICS
  • Threats / Breaches
  • More
    • Blockchain / Digital Currencies
    • Careers
    • Cyberlaw
    • Mobile
    • Social Engineering
  • Humor
Data Security Security Bloggers Network Threats & Breaches 

Home » Cybersecurity » Data Security » Be afraid … Be very afraid

Be afraid … Be very afraid

by Jane Grafton on October 31, 2019

It seems ironic that Halloween marks the final day of National Cybersecurity Awareness Month (NCSAM). The ghoulish holiday of spooks dredges up visits by shady hacker carnies. Except there’s no need to ask, “Trick or Treat?” With cybercriminals, it’s always a trick. And if you fall for it, it will cost you. Let’s look at some tricks from recent fraudsters you should be afraid of – very afraid.

Don’t Get Pinned

This juicy hack comes to us from Pieter Gunst, @DigitalLawyer. In a nutshell, a hacker pretends to be a bank employee alerting you to fraudulent account charges. The fraudster uses your member number and social engineering to reset your bank account password, then logs in as you. He reads off recent transactions asking if they are valid. This makes the call seem more legitimate. Eventually, the hacker asks for your bank pin code. This was the final straw that ended this particular fraud attempt. According to Pieter, this was “the most credible phishing attempt” he’d experienced to date. Here are the details.

Don’t Cash That Check

If you get a check in the mail you are not expecting, DON’T CASH IT. If you are practicing national cybersecurity awareness, you’ll know it’s likely a scam that will end up costing you dearly. By signing a check, you are signing a legally binding contract. So, you better know what that check is for before you sign your life away. You may be agreeing to a high-interest loan or enrolling in an expensive membership program. It’s nearly impossible to cancel these memberships and your monthly fee could be much more than the amount of that check.

Don’t Greet the Holidays

Do you love receiving holiday cards? Christmas is nearly upon us, so be prepared to sniff and snuff out malicious cyber greetings. Don’t open electronic greeting cards from people or companies you don’t know. Just like phishing emails, these e-cards contain malware laden links waiting to inject your computer with surprise gifts you really don’t want. This is table stakes for anyone who claims to know something about national cybersecurity awareness.

Don’t Read Fake News

Yep, fake news is a real thing. And, it’s dangerous. You could easily become a victim of an online scam by consuming what you think is a real news site, but which is actually a fake. Fake news sites serve up malicious links. Fake news sites sell fake products. And, fake shopping sites are dreaded wormholes. Don’t read fake news and don’t by fake products. Focus on national cybersecurity awareness.

Don’t Answer the Phone

You know from horror movies you should never answer the phone – especially if you are home alone at night. What about calls from numbers you don’t recognize with no caller ID? Should you answer those? No. There’s no treat that comes from an unknown number. More than likely, it’s a scammer trying to get you to divulge personal information or pay an erroneous bill. NEVER SAY THE WORD “YES” WHEN TALKING TO AN UNKNOWN CALLER. Be a national cybersecurity awareness champion and just say no. The fraudster is trying to record your voice saying “yes” so he can prove you agreed to buy something (which you did not). If the caller says, “Can you hear me?” HANG UP.

Do Play the 2019 NCSAM Trivia Game!

Enough about things you shouldn’t do. Let’s talk about actions you should take, in the wake of National Cybersecurity Awareness Month. The NCSAM website has a lot of information we hope you put to good use this month. It’s always important to be vigilant when it comes to national cybersecurity awareness. And, if you haven’t played the NCSAM Trivia game, you’re missing out! It’s easy, fun and informative. For example, do you know how many attempted cyberattacks are reported to the Pentagon every day? Download the 2019 Trivia Game and instructions to find out.

Do Implement Proactive Cybersecurity Controls

For large enterprises, the best defense is an automated offense. Luckily Gurucul offers Behavior Based Security Analytics to predict, detect and stop insider threats, account compromise, data exfiltration, privileged access abuse, fraud and more. Contact us for details. We want to put your mind at ease when it comes to protecting your data from malicious insiders and cyber criminals.

The post Be afraid … Be very afraid appeared first on Gurucul.


Recent Articles By Author
  • Build vs Buy: How Should You Implement Security Analytics?
  • ABCs of UEBA: M is for Machine Learning
  • ABCs of UEBA: L is for LOGS
More from Jane Grafton

*** This is a Security Bloggers Network syndicated blog from Blog – Gurucul authored by Jane Grafton. Read the original post at: https://gurucul.com/blog/be-afraid

October 31, 2019October 31, 2019 Jane Grafton Account Compromise, Blog, Cybersecurity, Data breach, data exfiltration
  • ← Securing the SMB With a Small Budget
  • FortiGate 60F: The Top NGFW with SD-WAN Now Accelerated by a Purpose-Built Security Processor →
Featured Blog

Enzoic

Automate Password Policy & NIST Password Guidelines

Enzoic

Microsoft Highlights The Risk of Stolen Passwords

Enzoic

Enzoic Customer Profile: IDShield

Enzoic

Old vs. New Methods for Employee Password Hardening

Subscribe to our Newsletters

Get breaking news, free eBooks and upcoming events delivered to your inbox.
  • View Security Boulevard Privacy Policy

Most Read on the Boulevard

The Role of Technology in the Modern SOC
Lack of Mobile Strategy Creates Security Holes
Predictions 2020: Data Security Next Year and Beyond
AWS Previews Cloud Security Advances
Predictions 2020: Don’t Forget the Current Threats
Sodinokibi ransomware gang infects yet another IT provider serving dentists; 100+ offices hit
Microsoft Finds 44 Million Compromised Credentials Used for Its Services
Domain Provider ‘Network Solutions’ Announces Data Breach
Phishing Campaign Uses Malicious Office 365 App
Year in Review: 18 Cybersecurity Statistics and Research Figures Summarizing 2019

Upcoming Webinars

There are no upcoming webinars at this time.

Download Free eBook

The Next Generation of Application Security

Recent Security Boulevard Chats

  • Cloud, DevSecOps and Network Security, All Together?
  • Security-as-Code with Tim Jefferson, Barracuda Networks
  • ASRTM with Rohit Sethi, Security Compass
  • Deception: Art or Science, Ofer Israeli, Illusive Networks
  • Tips to Secure IoT and Connected Systems w/ DigiCert

Industry Spotlight

Cyberattacks: Top 5 Ways You Could Be Hacked in 2020
Cybersecurity Industry Spotlight Security Awareness Security Boulevard (Original) 

Cyberattacks: Top 5 Ways You Could Be Hacked in 2020

December 13, 2019 Michael Bruemmer | Yesterday 0
Predictions 2020: Don’t Forget the Current Threats
Cybersecurity Industry Spotlight Network Security Security Boulevard (Original) 

Predictions 2020: Don’t Forget the Current Threats

December 12, 2019 Craig DAbreo | 1 day ago 0
Predictions 2020: Data Security Next Year and Beyond
Cybersecurity Data Security Industry Spotlight Security Boulevard (Original) 

Predictions 2020: Data Security Next Year and Beyond

December 10, 2019 Ameesh Divatia | 3 days ago 0

Top Stories

Hacking Ring Security Cameras: Amazon Makes it Easy
Cybersecurity Endpoint Featured Identity & Access IoT & ICS Security News Security Boulevard (Original) Spotlight 

Hacking Ring Security Cameras: Amazon Makes it Easy

December 13, 2019 Richi Jennings | Yesterday 0
Cyberhaven Applies Behavioral Analytics to Better Secure Data
Cybersecurity Data Security Featured News Security Boulevard (Original) Spotlight 

Cyberhaven Applies Behavioral Analytics to Better Secure Data

December 12, 2019 Michael Vizard | 1 day ago 0
Apple Passive-Aggressive PR Sparks Privacy Fear (Yet Again)
Cybersecurity Endpoint Featured Mobile Security News Security Boulevard (Original) Spotlight Threats & Breaches 

Apple Passive-Aggressive PR Sparks Privacy Fear (Yet Again)

December 6, 2019 Richi Jennings | Dec 06 0

Security Humor

via    the Comic Noggins of  Nitrozac  and  Snaggy  at  The Joy of Tech®

The Joy of Tech®, ‘The New Mac Pro Is Cruel’

Join the Community

  • Add your blog to Security Bloggers Network
  • Write for Security Boulevard
  • Bloggers Meetup and Awards
  • Ask a Question
  • Email: info@securityboulevard.com

Useful Links

  • About
  • Media Kit
  • Sponsors Info
  • Copyright
  • TOS
  • Privacy Policy
  • DMCA Compliance Statement

Other Mediaops Sites

  • Container Journal
  • DevOps.com
  • DevOps Connect
  • DevOps Institute
Copyright © 2019 MediaOps Inc. All rights reserved.
Our website uses cookies. By continuing to browse the website you are agreeing to our use of cookies. For more information on how we use cookies and how you can disable them, please read our Privacy Policy.