Protecting People

Five Minute Forecast for the week of January 24th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
CISA tells U.S. organizations to prepare for possible data-wiping attacks
Law enforcement links new ransomware to The Trick banking Trojan
The Red Cross urges cyber attackers to do the right thing


Joining us to kick off Data Privacy Week is Proofpoint Cybersecurity Evangelist, Brian Reed.

Five Minute Forecast for the week of January 17th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
Russian authorities arrest 14 in REvil crackdown
World’s largest marketplace for stolen credit cards closes its doors
CISA warns government agencies of vintage threats


Joining us is Proofpoint’s Fabiola Fernandez to talk about the launch of this year’s Phishing Awareness Kit.

You can buy a phish kit online for 10 bucks. But beware, since it’ll probably come back to bite you in ways you might not expect.
In this episode, hosts Selena Larson and Crista Giering chat with Jared Peck, Senior Threat Researcher at Proofpoint, about the pros and cons of phish kits — and why there’s no honor among thieves.
Join us as we discuss:
What a phish kit is and how it works
Ways a phish kit relates to MFA tokens and other authorizations
Monetization, credentials for initial access, and the attack chain
How organizations and people can defend against phishing attacks


Resource mentioned:
Have Money for a Latte? Then You Too Can Buy a Phish Kit | Proofpoint US


For more episodes like this one, subscribe to us on Apple Podcasts, Spotify, and the Proofpoint website, or just search for Protecting People in your favorite podcast player.

Five Minute Forecast for the week of January 10th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
FBI warns that USB drives sent through the mail probably aren’t belated holiday gifts
It’s a crime, but is it art? Thieves steal $2 million of NFTs
Famous authors phished for unpublished manuscripts


Joining us is Proofpoint Cybersecurity Evangelist, Brian Reed, for a look ahead at 2022.

Five Minute Forecast for the week of December 20th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
Threat actors exploit Log4Shell with a variety of attacks
Anubis banking trojan targets almost 400 Android finance apps
Thieves make off with another big cryptocurrency score


Joining us is Proofpoint Threat Researcher Selena Larson to discuss a spate of recent campaigns targeting customers of German financial institutions.

If you asked for M&M’s and received Skittles, you might pop a few in your mouth, but it won’t take long to realize something’s off.
This is exactly what’s happening with RTF files: Instead of the intended attachment, unaware companies are delivering these files and realizing later that they were actually malicious.
On this episode of Protecting People, hosts Selena Larson and Crista Giering chat with Michael Raggi, Senior Threat Research Engineer at Proofpoint, about RTF files, template injection, and campaigns using the technique in an effort to make sure customers aren’t being surprised with “Skittles.”
Join us as we discuss:
The importance of template injection
Campaigns using the technique
Widespread adoption of the RTF injection
Mitigating and monitoring the technique  


Resource mentioned:
https://www.proofpoint.com/us/blog/threat-insight/injection-new-black-novel-rtf-template-inject-technique-poised-widespread  
https://www.youtube.com/watch?v=bqyOtkibGro&feature=youtu.be
https://twitter.com/sansforensics/status/1470901574717382663


For more episodes like this one, subscribe to us on Apple Podcasts, Spotify, and the Proofpoint website, or just search for Protecting People in your favorite podcast player.

Five Minute Forecast for the week of December 13th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
Log4Shell puts the security industry on high alert
Wifi and Bluetooth flaws could leave millions of devices vulnerable
Emotet gives the gift of Cobalt Strike this holiday season


Joining us is Proofpoint Threat Researcher Eric Koeppen to discuss a series of holiday-themed campaigns launched by threat actor TA575.

Five Minute Forecast for the week of December 6th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
Hundreds of thousands of patient records stolen from Planned Parenthood
Thieves make off with a $200 million haul in the latest crypto heist
Labor activists communicate with service industry workers through hacked point-of-sale printers


Joining us is Proofpoint Senior Threat Intelligence Analyst, Selena Larson, for an update on pandemic-themed cyber attacks.

Five Minute Forecast for the week of November 29th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.
Interpol arrests almost 1000 suspects in cyber crime operation
A hardware bug could let attackers listen in on Android phone calls
The Huawei AppGallery delivers malware to nine million phones 


Joining us is Proofpoint Senior Threat Research Engineer, Michael Raggi, for a look at a dangerous new phishing technique.

Have you ever been bitten by a TOAD? No, we're not talking about the marsh-dwelling amphibian. We're discussing telephone oriented attack deliveries (TOADs) in which scammers use real phone numbers to gain access to information and accounts.
TOADS represent an atypical — but very poisonous — online threat especially to men in the 20-50 age range. Featuring believable fake invoices and U.S.-based phone numbers, these scammers can hop off with hundreds or thousands of your dollars.
On this episode of Protecting People, hosts Selena Larson and Crista Giering chat with Tim Kromphardt, Email Threat Researcher at Proofpoint, about TOADS, how to avoid them, bait them, or report them.
Join us as we discuss:
The two kinds of TOAD threats
How investigators locate and shut down TOAD scammers
What the scambaiting community does
Where and how to report a TOAD attack  


Resources mentioned:
Caught Beneath the Landline: A 411 on Telephone Oriented Attack Delivery  


For more episodes like this one, subscribe to us on Apple Podcasts, Spotify, and the Proofpoint website, or just search for Protecting People in your favorite podcast player.