Phishing awareness articles teach readers to identify and avoid phishing attacks across email, SMS, voice calls, and social media. Content includes real-world phishing examples, red flags to watch for, reporting procedures, and tips for running phishing simulation campaigns.
posts
160 Billion Reasons to Care About Spam Email Roughly 160 billion spam emails hit inboxes every single day. That's not a typo. According to data tracked by cybersecurity researchers, nearly half of all email traffic worldwide is spam. And while most of it is garden-variety junk — fake diet
In 2024, the FBI's Internet Crime Complaint Center received over 298,000 phishing complaints — making it the most reported cybercrime for the fifth consecutive year. Yet when I ask executives to give me a phishing definition, most of them describe something from 2009: a Nigerian prince email with
The Breach That Nearly Killed a Children's Charity In 2023, Save the Children International confirmed a cyberattack by the BianLian ransomware group that reportedly compromised nearly 7 GB of sensitive data — including financial records, health data, and personal information. A global nonprofit with dedicated IT resources still got
In 2023, MGM Resorts lost roughly $100 million after a social engineering phone call lasting just ten minutes gave a threat actor access to internal systems. The attackers didn't exploit some exotic zero-day vulnerability. They manipulated a help desk employee. If your cyber security definition starts and stops
The Phone Call That Cost One Company $25 Million In early 2024, a finance worker at engineering firm Arup was tricked into transferring $25 million after a video call with what appeared to be the company's CFO. Every person on that call was a deepfake. The attackers never
23andMe Lost Everything — Starting with Recycled Passwords In October 2023, genetic testing company 23andMe confirmed that a credential stuffing attack compromised roughly 6.9 million user accounts. Attackers didn't exploit a zero-day vulnerability or deploy sophisticated malware. They simply took usernames and passwords stolen from other breaches and
In January 2024, researchers discovered a file called "Naz.API" circulating on dark web forums. It contained over 70 million unique email addresses and their associated passwords — harvested from credential-stealing malware installed on everyday computers. Most of the victims had no idea their login information was for sale.
In March 2024, the FBI's IC3 reported that Americans lost over $45 million to smishing and vishing schemes in a single year — and those are just the cases people actually reported. I've personally investigated incidents where a single SMS message led to a six-figure wire transfer
A Single Email Cost This Company $100 Million In 2015, Ubiquiti Networks disclosed that threat actors used carefully crafted emails impersonating company executives to trick finance employees into wiring $46.7 million to overseas accounts. The attackers didn't use malware. They didn't exploit a software vulnerability.
Your Home Office Is a Threat Actor's Favorite Target In 2023, a single remote employee at MGM Resorts answered a social engineering call that led to a ransomware attack costing the company over $100 million. The attacker didn't breach a firewall. They didn't exploit
