Navigation section
email security
-
Another New Scam!
Well, today I got an email message supposedly from FedEx saying that they had my package and there is a problem with my address, with a big button to click to contact them and confirm my address. This is the first time I've gotten one that was supposed to be from FedEx, UPS, or the Post Office...- MikeHawthorne
- Thread
- amazon cybersecurity email email security fedex fraud phishing post office scam ups
- Replies: 3
- Forum: Windows Help and Support
-
Indicators of a Phishing/Social Engineering Email #2 - Fake PayPal
Here is another real phishing email. This one purporting to be from PayPal. Lets dig in... (Orange) we have typos and grammatical errors (1) Again we have a weird email address from @paypap-us.com. This is highly unlikely owned by PayPal. (2) This email is probably BCC'd to a bunch of users...- Neemobeer
- Thread
- account alert bcc cybersecurity email security email tactics fake emails fraud alert fraud detection grammatical errors link tracking malware paypal phishing red flags redirects scam prevention spam typos urgency
- Replies: 6
- Forum: Windows Security
-
AA21-148A: Sophisticated Spearphishing Campaign Targets Government Organizations, IGOs, and NGOs
Original release date: May 28, 2021 Summary The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) are responding to a spearphishing campaign targeting government organizations, intergovernmental organizations (IGOs), and non-governmental...- News
- Thread
- apt29 cisa cobalt strike compromise cybersecurity detection email security emerging threats fbi government incident response indicators iso file malware mitigations phishing risk management spearphishing threat actor user training
- Replies: 0
- Forum: Security Alerts
-
AA21-076A: TrickBot Malware
Original release date: March 17, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure Security Agency...- News
- Thread
- antivirus attacks cisa command and control credential theft cybersecurity data exfiltration email security fbi malware mitigation mitre att&ck network security phishing spearphishing threat intelligence trickbot trojan windows
- Replies: 0
- Forum: Security Alerts
-
AA20-280A: Emotet Malware
Original release date: October 6, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. This product was written by the Cybersecurity and...- News
- Thread
- antivirus brute force cisa cybersecurity data exfiltration detection email security emotet lateral movement malicious software malware mitigation mitre network security payload phishing phishing email ransomware threat trojan
- Replies: 1
- Forum: Security Alerts
-
AA20-227A: Phishing Emails Used to Deploy KONNI Malware
Original release date: August 14, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. The Cybersecurity and Infrastructure Security Agency (CISA)...- News
- Thread
- antivirus cisa command execution command shell cybersecurity data exfiltration email security keylogging konni malware mitigation mitre att&ck phishing remote access security best practices threat detection user awareness vba windows
- Replies: 0
- Forum: Security Alerts
-
AA20-225A: Malicious Cyber Actor Spoofing COVID-19 Loan Relief Webpage via Phishing Emails
Original release date: August 12, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is currently tracking an unknown malicious cyber actor who is spoofing the Small Business Administration (SBA) COVID-19 loan relief webpage via phishing emails. These emails include a...- News
- Thread
- antivirus best practices cisa covid-19 credential theft cybersecurity email security federal security indicators links low trust malicious actor malware mitigations phishing remote attacks sba threats vulnerability
- Replies: 0
- Forum: Security Alerts
-
Windows 10 Scam Alert, this just happened!!!
Hi Guys I was just going through my emails and I saw one marked "Prime Alert". The message said... Unfortunately, we were unable to process your Amazon Prime membership payment. But don't worry, it's easy to solve & We are here to help! Your payment failed for the following reason: Declined...- MikeHawthorne
- Thread
- amazon antivirus cyber threats cybersecurity digital scams email security fraud detection fraudulent emails malware membership payments online safety payment issues phishing prime benefits scam alert scam prevention security tips user experience user warning
- Replies: 6
- Forum: Windows Help and Support
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt cisa compromise covid-19 credential theft cybersecurity email security indicators malicious actors malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
Windows 10 Bogus Emails, what?
Hi Both my wife and I are getting bogus emails from people we know that we know they aren't sending intentionally. What these messages have in common is the code goo.gl/ I kind of understand that this is a signal to shorten the visible address. The messages have no subject, have a message...- MikeHawthorne
- Thread
- bogus emails cybersecurity detecting malware email issues email security goo.gl link shortener malware malware detection malwarebytes online safety phishing privacy scams security breach suspicious links threat analysis user awareness virus protection weight loss
- Replies: 3
- Forum: Windows Help and Support
-
TA18-201A: Emotet Malware
Original release date: July 20, 2018 Systems Affected Network Systems Overview Emotet is an advanced, modular banking Trojan that primarily functions as a downloader or dropper of other banking Trojans. Emotet continues to be among the most costly and destructive malware affecting state...- News
- Thread
- antivirus banking trojan credential theft cybersecurity data loss dhs email security emotet infection malicious emails malspam malware ms-isac network security persistence phishing remediation system security threat analysis windows
- Replies: 0
- Forum: Security Alerts
-
TA18-086A: Brute Force Attacks Conducted by Cyber Actors
Original release date: March 27, 2018 Systems Affected Networked systems Overview According to information derived from FBI investigations, malicious cyber actors are increasingly using a style of brute force attack known as password spraying against organizations in the United States and...- News
- Thread
- attack indicators brute force cloud applications cyber attacks cyber security data exfiltration dhs email security fbi federated authentication malicious actors multi-factor authentication network intrusion nist guidelines security policies single sign-on tactics threat mitigation victim environment
- Replies: 0
- Forum: Security Alerts
-
TA18-074A: Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors
Original release date: March 15, 2018 Systems Affected Domain Controllers File Servers Email Servers Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- critical infrastructure cyber kill chain cybersecurity dhs email security energy sector fbi incident response indicators of compromise industrial control systems intrusion detection malicious activity malware network security remote access russian government spear phishing technical alert threat actors watering hole attack
- Replies: 0
- Forum: Security Alerts
-
Office 365 security researchers: Double your bounties March-May 2017
Microsoft strives to protect our customers and we’re constantly improving our security posture to meet their needs. We realize the desire of researchers and customers to security test our services to ensure they can trust us and our solutions. We also believe that if a researcher informs us of a...- News
- Thread
- admin portal bounty program bountycraft compromise protection customer safety cybersecurity email security exchange online march 2017 may 2017 microsoft office 365 online services research rewards security training workshops user protection vulnerabilities web management
- Replies: 0
- Forum: Security Alerts
-
Windows 10 Not a fishing enthusiast.
Hi I've been getting Phishing emails in the last few days. I got one from my bank saying that someone had tried to log into my account and asked me to input my Account information and Password, to confirm that I was the account holder. It said that if I didn't do this immediately my account...- MikeHawthorne
- Thread
- account hacking account protection account safety bank fraud banking cybersecurity data privacy email safety email security fraud awareness identity theft online banking phishing phishing emails scams security tips twitter user caution
- Replies: 2
- Forum: Windows Help and Support
-
MS16-079 - Important: Security Update for Microsoft Exchange Server (3160339) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (June 14, 2016): Bulletin published. Summary: This security update resolves vulnerabilites in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in...- News
- Thread
- bulletin cybersecurity email security exchange server information disclosure information technology it security june 2016 microsoft ms16-079 networking owa patch security server management threat mitigation update version 1.0 vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Exchange Online Protection updates - Zero-hour Auto Purge (ZAP), Safety Tips and more |...
With Office 365, we continue to invest in new protections against malicious email attacks. Today Shobhit Sahay from the Office 365 team walks through seven new Exchange Online Protection (EOP) and Advanced Threat Protection (ATP) features that proactively identify and block the most dangerous...- News
- Thread
- advanced threat atp auto purge cybersecurity email security email threats eop exchange online features malicious email microsoft office office 365 phishing protection safety tips spam filtering threat protection updates zap zero-hour
- Replies: 0
- Forum: Live RSS Feeds
-
MS15-103 - Important: Vulnerabilities in Microsoft Exchange Server Could Allow Information...
Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if Outlook Web Access (OWA) fails to properly...- News
- Thread
- email security exchange server information disclosure microsoft ms15-103 owa sanitize user input security update vulnerabilities web requests
- Replies: 0
- Forum: Security Alerts
-
MS15-104 - Important: Vulnerabilities in Skype for Business Server and Lync Server Could...
Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Skype for Business Server and Microsoft Lync Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a...- News
- Thread
- crafted url email security important instant messenger lync server microsoft ms15-104 patch management privilege escalation remote access security bulletin security update september 2015 skype for business threats update vulnerabilities web security
- Replies: 0
- Forum: Security Alerts
-
MS14-055 - Important: Vulnerabilities in Microsoft Lync Server Could Allow Denial of Service...
Severity Rating: Important Revision Note: V1.0 (September 9, 2014): Bulletin published. Summary: This security update resolves three privately reported vulnerabilities in Microsoft Lync Server. The most severe of these vulnerabilities could allow information disclosure if user clicks on a...- News
- Thread
- bulletin denial of service email security information disclosure instant messenger lync server microsoft security update vulnerabilities
- Replies: 0
- Forum: Security Alerts