Momentum is an enterprise networking and cloud communications company. They design, build, and support networks and security around the globe. And Momentum has suffered a data breach. This cybersecurity event may involve upwards of 7.5 million people, which would not normally merit its own blog post. But this data breach affects other companies, including Shentel. … Read more
Homoglyphs and homographs are linguistic terms, used also in IT to describe certain types of internet deception. Basic Linguistics Homoglyphs are different letters that look similar or almost identical to each other. For example, English letters c, y, p (See, Why, Pee) appear the same as Russian (Cyrillic) letters с, ү and р (Ess, Oo … Read more
This year, the most prevalent phishing tactic I’m seeing in my customer inboxes uses “invitation” ruses. Please become familiar with Invitation phishing, so that you can dodge this when you receive some. Here are a boatload of samples: Invitation phishing has a lot going for it. Scammers love this attack vector, because it: These fake … Read more
So many phish in the sea — the latest scam for me to show you is this Dell Purchase phishing email: If you get this, it may seem rather believable. Much like the Costco phishing message, this Dell scam is sent from Dell, and the sender address and internal links lead to their website. But … Read more
I’ve blogged about scammers’ use and abuse of remote access software before. Specifically, I see Connectwise’s ScreenConnect software deployed by bad actors to infiltrate people’s computers. But this problem is expanding, happening more often this year. The uptick is rather alarming to me, so read on and buckle up: Coming from Average Phishing Emails I … Read more
The latest email hazard to circulate is Reclaim.ai phishing. Check out this example and don’t be fooled: This is just another Thank You For Your Purchase Scam. That is to say: this is just a bunch of lies, designed to alarm and upset the recipient with a purchase that didn’t happen. The goal is to … Read more
Let’s go over a recent example of Quickbooks phishing. This one is fairly easy to spot as a fake, but it’s just a starting point. These Quickbooks scam-emails are only going to get better… The above email may not fool everyone. The sender address is rather odd, and there are no convincing graphics in the … Read more
I’m seeing a lot of real estate scams, posted to TikTok this month. Check out the following screenshot and other details: If I needed an affordable place to stay, $950/mo would be a great deal in my zip code. Most 3BR rentals around here are going for twice that price! And that should be your … Read more
Some of my neighbors recently grew interested in a text-borne survey. It caught my attention when I saw people pushing friends & family to find it and fill it out. With a quick glance, I knew better and dismissed the message as junk. But I can do better than that. Maybe my picking apart this … Read more
Check out this new Truist phishing email with me. You don’t want to fall victim to this ruse! The normal tells are there: the sender email address is dodgy and they use the word “kindly”. But otherwise, this one is a solid attempt and may fool some people. Especially if viewed on a mobile device, … Read more