According to Cybersecurity Dive, “Americans lost $16.6 billion to cyber fraud and internet crimes last year (2024), up 33% from the previous year. Phishing, spoofing and extortion topped the list of complaints, but investment and business email compromise (BEC) scams cost victims the most money.” Yes, phishing continues to be a significant problem in
What to Know About SafePay Ransomware Group
The SafePay ransomware group has been active since fall 2024 and has increased its activity this spring and summer. According to NCC Group, SafePay hit the most victims of any threat actor in May 2025—it is linked to 248 victims to date, according to Ransomware.live and RansomFeed.
The group uses common tactics, including social…
Privacy Tip #440 – Text Scam Proceeds Surpass $470M in 2024
I have been getting a lot of texts that are clearly scams, and those around me have confirmed an increase in spammy texts.
According to an FTC Consumer Protection Data Spotlight, individuals lost over $470 million resulting from text scams. The top text scams of 2024 that accounted for half of the $470 million…
Joint Cybersecurity Advisory Released on Ghost (Cring) Ransomware
The Cybersecurity & Infrastructure Security Agency, the Federal Bureau of Investigation, and the Multi-State Information Sharing and Analysis Center released an advisory on February 19, 2025, providing information on Ghost ransomware activity.
According to the advisory, “Ghost actors conduct these widespread attacks targeting and compromising organizations with outdated versions of software and firmware on their…
Privacy Tip #412 – Beware of Spamouflage
A new report by Graphika, as reported by Cyberscoop, has identified a Chinese-linked group that is “creating American personas online and spreading content designed to denigrate both parties and candidates.”
The disinformation group, known as Dragonbridge, Taizi Flood, and Empire Dragon, “produces high-volumes of spammy, inauthentic content online in an effort to influence political and…
Privacy Tip #246 – Spam, Spam, Spam: Be Extra Cautious
Security researchers are warning companies to be aware of a new resurgence of the Emotet botnet that has been reactivated after a hiatus of five months.
According to the researchers, the Emotet malware steals information, and has been used to distribute the banking Trojan Trickbot. Attackers using the Emotet botnet use simple emails that are…
Privacy Tip #206 – Be Mindful of Calendar Invites—They Can Contain Spam
Spam is invading all aspects of our online life, and of late, even our online calendars. I hadn’t thought about embedded malware in calendar invites until I read an informative krebsonsecurity.com blog article this week. I think this is something everyone should know about and be mindful of when receiving calendar invites.
Calendar invites are…
Privacy Tip #185 – Scammers Are Getting Bolder and More Insistent
I try to keep my spam filter on the most restrictive setting, which has dramatically decreased the amount of spam I receive in my email box every day. But every once in a while, I receive an email that makes my gut twitch and my eyebrows raise. I got one today from a well-known bank,…
FBI reports $3.1 billion lost by businesses through “business email compromise”
This article co-authored with guest blogger David Wang, a R+C summer associate and student at Boston College Law School
Wire fraud crime has long been a problem for financial institutions and banks. However, wire fraud through email is a completely different beast. Originally characterized by law enforcement as an extension of traditional wire fraud, wire…
Senate hearing reviews ransomware in a school system
On May 18, the Senate Judiciary Committee Subcommittee on Crime and Terrorism heard from Charles C. Hucks, the Executive Director of Technology for the Horry County, South Carolina, School System. The 52 schools and the central offices in the system were all affected when the decision was made to shut down over 600 servers district-wide…