Whats!App Subscription Expired – Phishing

We see lots of phishing attempts . This one is trying to get your credit card details. It pretends to be a warning that your WhatsApp subscription has expired. They use email addresses and subjects that will entice a user to read the email and open the attachment. Remember many Continue reading → Continue reading Whats!App Subscription Expired – Phishing

Account Deactivation Alert – email account credentials Phishing

We see lots of phishing attempts for email credentials. The email for this one is nothing very special or unusual. It pretends to be a message from the Mail Administrator saying your account is scheduled for de-activation and you should log in & cancel the de-activation if you didn’t request Continue reading → Continue reading Account Deactivation Alert – email account credentials Phishing

Tax prep firm reaches settlement with FTC over cybersecurity lapses

TaxSlayer, a tax preparation company hacked by a ring of identity thieves in 2015, has agreed to settle a Federal Trade Commission complaint about its cybersecurity and data privacy practices — consenting to adopt a new security program and pay for third-party audits of its services. “Tax preparation services are responsible for very sensitive information, so it’s critical they implement appropriate safeguards,” said Tom Pahl, acting director of the FTC’s Bureau of Consumer Protection in a statement. “TaxSlayer didn’t have an adequate risk assessment plan.” The FTC announced the settlement in a statement Tuesday, saying the company was in violation of the Gramm-Leach-Bliley Act’s Safeguards Rule, which requires financial institutions to implement security safeguards to protect customers’ personal information; and its Privacy Rule, which requires financial institutions to tell customers about their privacy practices — the widely ignored “privacy notices” that they distribute. There is no direct financial penalty, but the company has to bear the […]

The post Tax prep firm reaches settlement with FTC over cybersecurity lapses appeared first on Cyberscoop.

Continue reading Tax prep firm reaches settlement with FTC over cybersecurity lapses

You sold an item spam is an amazon phishing attempt

We see a lot of Amazon phishing attempts. This one is quite different to the usual ones we see. Although there are a lot of Amazon sellers, the chances of a mass malspam like this one actually  being received by a seller is quite small compared with the more usual Continue reading → Continue reading You sold an item spam is an amazon phishing attempt

Urgent Order Quotation – Phishing for email credentials

We see lots of phishing attempts for email credentials. The scammers get ever more creative and try new and different tricks all the time. This one pretends to be a request for a quotation for an urgent order. They use email addresses and subjects that will entice a user to Continue reading → Continue reading Urgent Order Quotation – Phishing for email credentials

Identity Thieves Porting Mobile Numbers to Hijack Victims’ Web Accounts

Identity thieves are porting users’ mobile phone numbers to devices under their control in order to hijack their web accounts. This type of attack begin when hackers call up a mobile service provider. Using a bit of social engineering, the bad actors convince an agent at the provider to transfer control of a target mobile […]… Read More

The post Identity Thieves Porting Mobile Numbers to Hijack Victims’ Web Accounts appeared first on The State of Security.

Continue reading Identity Thieves Porting Mobile Numbers to Hijack Victims’ Web Accounts