Assessing an Email’s Legitimacy

Assessing an Email’s Legitimacy

| | email, Phishing, security
I recently received an email sporting “Wells Fargo” logos. It asked me to do a survey. It was actually sent from the domain ‘morpace.com,’ which used to belong to a product survey ...
Beware of Phone Phishing

Beware of Phone Phishing

Just because the email (or letter) directs you to a phone number doesn’t mean you aren’t being phished. The nearby image shows part of a recent phishing email. It claims that I ...
New Trickbot Campaign Uses Fake Emails from U.S. Department of Labor

New Trickbot Campaign Uses Fake Emails from U.S. Department of Labor

A new campaign is targeting people with messages that seem to come from the U.S. Department of Labor (DoL), trying to trick them into opening a DOC file, enabling macros, and eventually ...
Digital Fraudsters Masquerading as FINRA in Phishing Emails

Digital Fraudsters Masquerading as FINRA in Phishing Emails

The Financial Industry Regulatory Authority (FINRA) warned that digital fraudsters are impersonating it in an ongoing phishing email campaign. In a regulatory notice published on its website, FINRA revealed that malicious actors ...
email

COVID Email Attack or Email Harvesting?

The well-publicized publishing of 25,000+ emails and passwords allegedly associated with the World Health Organization, the Gates Foundation and the National Institutes of Health has captured the attention of both infosec practitioner ...
Security Boulevard

Detecting a Phish on an iPhone

| | Apple, email, iPhone, Phishing, security
In their obsession with simplifying the phone interface, the iPhone designers make it a bit harder to detect dangerous emails. Here is an email claiming to be from “Humana Health” asking me ...
COVID-19 Scam Roundup – April 6, 2020

COVID-19 Scam Roundup – April 6, 2020

Digital fraudsters have seized upon coronavirus 2019 (COVID-19) as a lure for their new scams and attack campaigns. Together, these malicious operations constitute nothing short of a deluge. Barracuda revealed that it ...
Email Security Services Protection (ESSP) test 2020 Q1

Email security: Is it any good against hackers?

World’s first in-depth, public test of security services vs. targeted attacks. This email security test report is the product of two years of advanced threat research. We have worked with the security ...
COVID-19 Scam Roundup – March 30, 2020

COVID-19 Scam Roundup – March 30, 2020

Many in the digital security community are coming together to combat malicious actors during the coronavirus disease 2019 (COVID-19) global outbreak. One of the most visible of these new efforts is the ...
s/mime email certificates

What is S/MIME and Do I Need It?

What is S/MIME? S/MIME stands for “Secure/Multipurpose Internet Mail Extensions”. It’s an IETF standard for public key encryption, as well as for creating a digital signature for MIME data. In essence, S/MIME ...