Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Scammers Exploit Uncertainty Surrounding US Tariffs

May 29, 2025 By KnowBe4 Team In KnowBe4
Cybersecurity experts are warning that scammers are taking advantage of uncertainty surrounding the U.S. administration’s tariff policies, CNBC reports. Fraudsters may send texts or emails posing as retailers, delivery companies or government agencies, requesting tariff-related payments for purchases and deliveries. James Lee, president of the Identity Theft Resource Center, noted that scammers frequently take advantage of new government policies to launch phishing attacks.
Read Post
avast

How crypto is changing the game for financial scammers

May 28, 2025 By Emily Lockwood In Avast
Crypto scams are evolving fast. Learn how scammers operate—and discover five simple ways to protect your money and identity in the crypto age. Cryptocurrency has transformed how we save, spend, and invest money. But with this wave of innovation comes a new breed of scams—slick, high-tech, and harder to spot than ever. Scammers have leveled up, using polished websites, fake influencer videos, and deep knowledge of human behavior to pull off million-dollar schemes.
Read Post
knowbe4

If I Had Only 20 Seconds To Teach People How To Avoid Scams

May 27, 2025 By Roger Grimes In KnowBe4
Human risk management involves more than security awareness training, but training is a huge part of the mix. How else are you going to best fight a cyberthreat that is responsible for 70% to 90% of all successful data breaches after already bypassing every technical cybersecurity defense you threw in its way? At some point, a harmful scam message will make it to a user, and that user will be called upon to evaluate its importance and treatment.
Read Post
WatchGuard

The Psychology of Deception: How to Protect Yourself from Cyber Fraud

May 26, 2025 By Manu Santamaría Delgado In WatchGuard
Cybersecurity typically focuses on technical defenses against threats. However, the study of deception can show how cybercriminals exploit human nature for their gain. Scamming is central in many cyberattacks, such as phishing, social engineering, and disinformation campaigns. We can gain insight into how these mechanisms work by mapping the emotions that bad actors aim to trigger in their victims.
Read Post

The MemcycoFM Show: Episode 2 - How to Choose the Best Domain Takedown Service

May 26, 2025 By Memcyco In Memcyco
If you’re searching for the best domain takedown service, chances are your brand has already been impersonated, or you’re proactively trying to stop that from happening. Either way, you know the stakes: malicious sites that mimic your brand can destroy trust, harvest credentials, and cost your business real revenue. Of course, ‘best’ depends on your threat landscape and internal priorities. This episode breaks down what actually matters so you can choose the right fit for your needs.
View Video

The MemcycoFM Show: Episode 3 - Memcyco Recognized in Datos Insights' 2025 Fintech Spotlight Report

May 26, 2025 By Memcyco In Memcyco
The battle for digital trust is intensifying. Fraudsters are no longer lone actors, they’re industrialized operations, using AI-driven phishing kits and Phishing-as-a-Service models to exploit businesses and their customers at unprecedented speed. In this environment, traditional fraud defenses are collapsing under the weight of innovation they weren’t designed to face.
View Video
knowbe4

Impersonating Meta, Powered by AppSheet: A Rising Phishing Campaign Exploits Trusted Platforms to Evade Detection

May 23, 2025 By KnowBe4 Threat Lab In KnowBe4
Since March 2025, the KnowBe4 Threat Labs team has observed a surge in phishing attacks that exploit Google’s AppSheet platform to launch a highly targeted, sophisticated campaign impersonating social media platform giant Meta.
Read Post
memcyco

How the 4 Elements of Fraud Power Modern Scams

May 22, 2025 By Adi Katzir In Memcyco
Many of today’s most damaging scams are built on repeatable, well-understood patterns. The legal world defines four core elements of fraud with direct applicability to today’s phishing, impersonation, and account takeover (ATO) threats: By understanding this structure, security leaders and fraud teams can spot threats earlier and counter them more effectively.
Read Post
upguard

Digital Brand Protection in the Age of Impersonation

May 21, 2025 By Leah Sadoian In UpGuard
Online fraud remains a significant and rapidly expanding threat in today's cyber threat landscape. According to the FTC, consumers in the U.S. lost a staggering $12.5 billion to fraud in 2024, a 25% surge from the previous year. The most commonly reported category? Imposter scams. This difficult-to-intercept form of fraud alone accounted for $2.95 billion of those losses.
Read Post
knowbe4

Beware of Coinbase Scams

May 19, 2025 By Roger Grimes In KnowBe4
I got this Coinbase-related scam in my personal inbox last week. Coinbase is one of the world’s largest cryptocurrency exchange sites. So big and trusted, it’s the first cryptocurrency exchange to be added to the US S&P 500. I’ve been a Coinbase member from the beginning, so this email got my attention. I was pretty skeptical from the start, and upon further exploration, it was definitely a scam.
Read Post
idstrong

Why "Card Testing Fraud" Is Becoming a Major Threat to E-Commerce Businesses

May 18, 2025 By IDStrong In IDStrong
Credit card and banking information is one of the major targets for data breaches and other cyber attacks. These details are sold on the black market and cost businesses and consumers billions in losses every year. Victims who learn early about stolen information typically take measures to prevent future use, such as canceling cards and changing online passwords. However, data breach notices are easy to miss, and countless active cards remain for sale on the dark web.
Read Post
memcyco

How to Choose the Best Domain Takedown Service

May 15, 2025 By Ron Whitling In Memcyco
If you’re searching for the best domain takedown service, chances are your brand has already been impersonated, or you’re proactively trying to stop that from happening. Either way, you know the stakes: malicious sites that mimic your brand can destroy trust, harvest credentials, and cost your business real revenue. Of course, ‘best’ depends on your threat landscape and internal priorities.
Read Post
netacea

The Cyberfraud Economy: 1 in 4 Consumers Tempted by 'Refund Hacks'

May 15, 2025 By Netacea In Netacea
Retail fraud is becoming increasingly normalized in the US and UK as ‘refund hacks’ are promoted to consumers by organized crime gangs looking to recruit both knowing and unwitting digital mules. This positioning of fraudulent activity as a ‘refund hack’ deliberately hides its illegal nature. Combined with growing awareness of fraud techniques – both online and offline – it’s driving consumer acceptance of casual fraud. This is bad news for retailers.
Read Post

The MemcycoFM Show: Episode 1 - Disrupting AI-Powered Phishing, What CISOs Must Do Now

May 14, 2025 By Memcyco In Memcyco
Welcome to the inaugural episode of our sparkling new podcast, The MemcycoFM Show. Your new go-to for everything digital deception, brandjacking, and real-time cybersecurity defense. In our first episode, two of our own Memcycans discuss why AI-powered phishing is changing the threat landscape and what CISOs must do to stay ahead. Powered by Memcyco’s mission to protect trust in the digital world.
View Video
fidelis security

Cyber Deception as a Strategic Pillar in Active Defense

May 13, 2025 By Fidelis Security In Fidelis Security
The cat-and-mouse game of cybersecurity never stops, and cyber deception in active defense gives defenders a powerful edge. Sun Tzu’s ancient wisdom “All warfare is based on deception” fits modern cyber defense strategies perfectly. Outsmarting adversaries has become just as crucial as blocking them.
Read Post
tripwire

Report Reveals BEC Cryptocurrency Scams Rose by 344%

May 13, 2025 By Katrina Thompson In Tripwire
APWG's Q4 2024 Phishing Activity Trends Report, published March 19th, revealed that more than eight in ten Business Email Compromise (BEC) attacks last quarter were sent by attackers favoring Google's free webmail service. By comparison, only 10% used Microsoft's free email web app, Outlook.com.
Read Post
centripetal

Security Bulletin: Magecart Skimming Campaign

May 8, 2025 By Anna Balabushko In Centripetal
Magecart is a long-running digital skimming threat attributed to multiple financially motivated cybercriminal groups specializing in the theft of payment card data from e-commerce websites. First identified in 2015, Magecart attacks have continuously evolved, leveraging compromised third-party services, supply chain vulnerabilities, and increasingly sophisticated obfuscation tactics to inject malicious JavaScript skimmers into checkout pages.
Read Post
knowbe4

Warning: Phishing Campaign Impersonates the US Social Security Administration

May 7, 2025 By Cindy Zhou In KnowBe4
Researchers at Malwarebytes warn that phishing emails are impersonating the US Social Security Administration (SSA) to trick users into installing the ScreenConnect remote access tool. ScreenConnect is a legitimate tool used for remote IT management, but it can be abused by hackers to take control of victims’ computers.
Read Post
The Evolving Threat Landscape: How Authentication Management Is Key to Protecting Your Business from Fraud

The Evolving Threat Landscape: How Authentication Management Is Key to Protecting Your Business from Fraud

May 6, 2025 By SecuritySenses In SecuritySenses
As cybercrime continues to evolve, businesses face an increasing number of sophisticated fraud attempts. From identity theft to financial fraud, the digital age has brought about new challenges in maintaining security. One of the most effective ways to mitigate the risks associated with these threats is through strong authentication management. By employing robust authentication measures, companies can significantly reduce the likelihood of fraud, ensuring their operations remain secure and trustworthy.
Read Post
splunk

Imposters at the Gate: Spotting Remote Employment Fraud Before It Crosses the Wire

May 5, 2025 By Alex Orleans In Splunk
Have you ever sat in an interview and felt that something wasn't quite right? Your intuition may have been closer to the truth than you realized. A new kind of adversary has emerged, and they aren’t trying to break through your firewall; instead, they are logging in through your VPN using their freshly issued business credentials.
Read Post
knowbe4

Xfinity Scam Might Explain Similar Scams

May 1, 2025 By Roger Grimes In KnowBe4
Recently, I covered a T-Mobile scam where a friend of mine narrowly avoided losing money. In that scam, the attackers called up pretending to be from T-Mobile offering him a cannot-pass-up 30% discount on future T-Mobile bills. While he was initially suspicious of the unexpected callers, they gained his confidence by repeating the amounts of his last two T-Mobile bills, billing address, and knew that his wife was also on the account.
Read Post

Roger Grimes talks AI Deepfake Threats with theCUBE at RSAC 2025

May 1, 2025 By KnowBe4 In KnowBe4
Roger Grimes, KnowBe4's Data-Driven Defense Evangelist, reveals how autonomous, and AI-powered deepfake malware is transforming the cybersecurity landscape in this eye-opening RSAC 2025 interview with @siliconangle. Discover why organizations must urgently prepare for sophisticated social engineering attacks that leverage AI technology to bypass traditional security measures. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.