Rafael Gutierrez

We provide IT soul food for frustrated business owners. Love entrepreneurs who find purpose in their work. Give our work to you so you can give yours to others.

[Rafael Gutierrez @KerberoIT]

A malware distribution campaign is abusing organizations’ contact forms to send malicious emails designed to catch the attention of companies’ customer support personnel.
#cybersecurity #infosec #riskmanagement #encryption #privacy #phishing #cyberattack #training #ransomware

[Rafael Gutierrez @KerberoIT]

-The massive amount of emails received
-Perceived security of the office environment
-Lack of security culture
#cybersecurity #infosec #riskmanagement #encryption #dataprotection #privacy #tech #phishing #cyberattack #training #ransomware #business #support #technology #security

[Rafael Gutierrez @KerberoIT]

#Qbot is back! Harvest browsing data, email records, and banking credentials, scrapes RAM, extracts emails related to tax payments, job recruitment, COVID-19. Uploads all to remote server. 5% of all organizations already infected.
#infosec #phishing #ransomware #virus #security

[Rafael Gutierrez @KerberoIT]

Cybersecurity Ventures 5 predictions for 2020 to 2021
#Cybercrime damage costs $6 trillion
#Cybersecurity spending $1 trillion
3.5 million unfilled cybersecurity jobs
#Ransomware damage costs 57X
70% of #crypto transactions will be #illegal activity
#infosec #business #security

[Rafael Gutierrez @KerberoIT]

Malicious actors are now spoofing notifications from Google concerning the alleged attacks by "state actors". Their goal: penetrate organizations by compromising their G Suite accounts.
#cybersecurity #infosec #riskmanagement #encryption #dataprotection #privacy #protection

[Rafael Gutierrez @KerberoIT]

The FBI has warned that victims of romance scams lost $475 million in 2019 - BleepingComputer reports.

#dataprotection #privacy #tech #phishing #training #ransomware #business #vulnerability #protection #support #virus #digital #cloud #technology #security

[Rafael Gutierrez @KerberoIT]

Trusted third party phishing:
-Make people aware of the growing threat
-Pay attention to action requests more than email addresses
-Make a quick call
#cybersecurity #infosec #riskmanagement #encryption #dataprotection #privacy #phishing #training #ransomware #business #security

[Rafael Gutierrez @KerberoIT]

Malwarebytes’ latest report: 61 percent of organizations do not even encourage employees to put anti-viruses on personal devices
#cybersecurity #infosec #riskmanagement #dataprotection #privacy #phishing #cyberattack #training #ransomware #business #vulnerability #protection

[Rafael Gutierrez @KerberoIT]

Malwarebytes: nearly half (44%) of organizations did not provide cybersecurity training on “the potential threats of working from home.”
Result: 20% experienced a security breach of some kind.
#cybersecurity #infosec #riskmanagement #phishing #cyberattack #training #ransomware

[Rafael Gutierrez @KerberoIT]

KONNI RAT:
-Establishes persistence on infected endpoints
-Bypasses notification when admin privileges are req.
-Collects data and keystrokes
-Steals profile and credentials
-Takes screenshots
-FTP service to exfiltrate collected data
-HTTP for remote command and control
#infosec

[Rafael Gutierrez @KerberoIT]

New #ransomware operation #DarkSide creates customized ransomware executables for the specific company they are attacking.
#cybersecurity #infosec #riskmanagement #dataprotection #phishing #cyberattack #training #ransomware #business #vulnerability #protection #support #virus

[Rafael Gutierrez @KerberoIT]

In June, a gang of #ransomware #bitcoin launderers was apprehended. The group ran 20 #cryptocurrency exchanges over 2 years to process $42 million dollars.
#cybersecurity #infosec #riskmanagement #encryption #dataprotection #phishing #training #business #protection #security

[Rafael Gutierrez @KerberoIT]

@briankerbs reports #phishing/#vishing gang with a remarkably high success rate that operates primarily through paid requests where customers seeking access to specific companies or accounts can hire them to target employees working remotely at home.
#infosec #phishing #security

[Rafael Gutierrez @KerberoIT]

The NHS malicious email reporting system received a total of 43,108 reports of suspicious emails received by NHS doctors, nurses and other staff between March and mid-July.
#cybersecurity #infosec #riskmanagement #security #hack #tech #phishing #cyberattack #training #business

[Rafael Gutierrez @KerberoIT]

Remote work solution checklist:
-Consolidate data
-Get insights
-Control access
-Restrict non secure devices

https://t.co/5XFBMjXC7c

[Rafael Gutierrez @KerberoIT]

Literally no one:

Fancy Bear: Linux malware toolset consisting of an implant coupled with a kernel module rootkit, a file transfer and port forwarding tool, and a Command and Control (C2) server

#cybersecurity #infosec #riskmanagement #dataprotection #privacy #hack #tech #APT

[Rafael Gutierrez @KerberoIT]

CheckPoint reports #cyberattacks begin with a malicious phishing email 80% of the time. Executables, Excel documents, and Word documents are the top three attachments
#cybersecurity #infosec #privacy #phishing #training #ransomware #protection #support #virus #securit

[Rafael Gutierrez @KerberoIT]

Nearly 38% of victim traffic to a phishing website and over 7% of successfully phished victims occurred during the golden hours (12 first hours of the campaign)
#cybersecurity #infosec #riskmanagement #privacy #tech #phishing #cyberattack #training #ransomware #business

[Rafael Gutierrez @KerberoIT]

Every organization in the public and private sector is #infected with #malware, according to Intrusion, Inc. If our #security culture doesn’t change, we are in trouble. Some specialists predict #banking and #electrical outages caused by #cyberthreats not so far into the future.

[Rafael Gutierrez @KerberoIT]

The U.N. counterterrorism chief reported last Thursday a 350% increase in phishing websites in the first quarter of the year, mostly hospitals and health care systems targeted
#cybersecurity #infosec #riskmanagement #dataprotection #phishing #cyberattack #training #ransomware