Fake LinkedIn Phishing Profiles - Highly Convincing

Knowbe4 report a very professional phishing attempt using a fake LinkedIn invitation. The fake profile that had been set up was very convincing. It was exposed by performing a 'reverse search' on the image of the person on their fake profile, and it turned out to be a stock image from a commercial website. Of course, in time the criminals will use a photo of someone who can't be traced so easily. Another angle would be to mimic the profile of people you might vaguely know, to encourage you to acept the fake invitation e.g. from someone in your company. A simple but potentially effective threat that just underlines the need to avoid clicking on links in emails.

Cyber to the Citizen

More sterling work to try and improve online security as the BCS teams with Get Safe Online to help educate communities on cyber security.

Are you cyber streetwise?

The new UK Government information site for Cyber Security awareness is worth checking out. 'Cyber Streetwise' is very well-crafted, somehow the way it invites you to meander through a cartoon-like street scene encourages you to click and read snippets of useful information about cyber security for small businesses and home users.

Secure your Passwords, and your digital legacy, with PasswordBox

Password management software company PasswordBox appears to have quickly spent some of its recent $6M funding on acquiring a complementary offering. 'Legacy Locker' is a digital afterlife service that – should you pass on without passing on your passwords – grants access to your online assets to friends and loved ones.

PasswordBox is another member of the important set of software that helps you manage your passwords. Definitely worth checking out.

Beware 'Ransomware' targeting UK computer users and SMEs

The UK's National Crime Agency (NCA) has warned of a 'significant risk' from emails with an attachment that, if launched, runs malware known as Cryptolocker. Cryptolocker encrypts the user’s files on the infected machine and demands payment to recover the data - an attack known as ransomware. The NCA points out that this spamming campaign is particularly targeting SMEs (presumably because of the type of message and fake attachment).

The usual advice to protect yourself applies including: ensure anti-virus is up to date; back up data; and don't open attachments if you have any doubts at all about their origin.