Hackers are shifting their tactics away from traditional phishing and ransomware attacks, and moving toward stealthier intrusions via websites and the software supply chain, according to a recent report. Read More
Digest Article
Topic: Phishing
Phishing is the fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers.
The CSIAC has compiled many resources on the topic of Phishing. Please browse the resources below.
Event
CSIAC Webinars – Phishing for Solutions: Are Cybersecurity Compliance Based Programs Working?
Phishing and spear phishing, i.e. social engineering, have rendered today’s users defenseless against increasingly sophisticated cyber-attacks. In 2016, the Director of National Intelligence (DNI) reported that 91% of all successful cyber-attacks against the Federal Government in 2015 were enabled by social engineering. In short, 91% of successful Read More
CSIAC Webinar
Phishing for Solutions: Are Cybersecurity Compliance Based Programs Working?
Phishing and spear phishing, i.e. social engineering, have rendered today’s users defenseless against increasingly sophisticated cyber-attacks. In 2016, the Director of National Intelligence (DNI) reported that 91% of all successful cyber-attacks against the Federal Government in 2015 were enabled by social engineering. In short, 91% of successful Read More
Author / Presenter
Dr. Terry R. Merz, CISSP, CISM
Dr. Merz is a Senior Research Scientist at the Pacific Northwest National Laboratory (PNNL). She holds a Doctorate and Masters in Computer Science, with a concentration in Information Assurance from Colorado Technical University, and a Bachelor of Science in Information Management from the University of Maryland. Dr. Merz has 17+ years of cybersecurity Read More
Podcast
Phishing
Scamming users into giving up their information is not a new concept. However, for users to avoid modern phishing attempts, we need to understand the basics of everyday internet infrastructures such as URL links, web domain structure, and common attack techniques. This video discusses how attackers use phishing techniques to gain unauthorized access to a Read More
Podcast
CS Digest Roundtable #3: Tricking Neural Networks, CIA Impersonation, International Data Privacy, and Encrypted Malware Detection
In today's episode the CSIAC takes the most important articles in a past CS Digest and discusses the articles' importance in the world of technology and cyber security. Read More
Digest Article
Analysis of 3,200 Phishing Kits Sheds Light on Attacker Tools and Techniques
Phishing kits are used extensively by cybercriminals to increase the efficiency of stealing user credentials. The basic kit comprises an accurate clone of the target medium's login-in page (Gmail, Facebook, Office 365, targeted banks, etc), and a pre-written php script to steal the credentials -- both bundled and distributed as a zip file. Successfully Read More
Podcast
Phishing – Simple Steps to Online Safety
Phishing is a malicious technique used to steal personal information. Malicious actors often use the stolen information for theft or blackmail. To protect your organization, follow a few guidelines: Train your users to spot email scams and fake offers. Scams often have poor grammar or strange account names. Persistent phishing campaigns are Read More
CSIAC Information Page
Simple Steps to Online Safety – National Cyber Security Awareness Month – Week 1: October 2-6
Overview: All members of the public can take some simple actions to protect themselves online and to recover in the event a cyber incident occurs. This week’s topic is simple steps that an individual or organization can take to improve their online safety. CSIAC has a substantial repository of information available to its users. We will highlight a few Read More
Digest Article
Researchers Find Phishing Site Encrypted With AES
"This technique uses AES encryption instead of B64 or simple XOR routines write new content to the page at load time," said a Ring 0 Labs representative in an email to Threatpost. "Since this is a newer technique, it can be fairly effective at avoiding scanning services and crawlers that aim to detect these types of sites. But like anything, these services Read More
