Subj : Sophos Virus News
To   : All
From : Daryl Stout
Date : Fri Oct 02 2020 20:48:04

Here is the latest information from the Naked Security Blog from Sophos.
You can go to nakedsecurity.sophos.com to read these. You can also sign
up to have these delivered to your email during the week.

Be sure that you PRACTICE SAFE HEX -- and that you keep your anti-virus,
anti-malware, anti-spyware, and anti-ransomware software up to date. 

Do NOT open any email attachments, even if they appear to be from someone
you know!! Even if you were notified in advance that the file was coming
before it arrived, use EXTREME CAUTION when opening attachments, or even
clicking on links. 

If it appears your email has been spoofed, change your access password 
immediately!! It's best to use 2 unrelated words (the longer, the better), 
separated by a non-alphabetic character...such as BOAT+TOUCH (please do 
NOT use this example). While you can't use high ascii characters online,
you can use numbers, letters (upper and lower case), and symbols.

The use of a Password Manager, such as Dashlane, is STRONGLY RECOMMENDED. 
That way, you can create a different password for each site you visit, 
and you don't have to remember them...plus, you can make it a complex 
password, that's difficult for someone to guess. If they do, they can 
steal your identity, and make you liable for things like credit card 
debt, etc.

Lastly, if your browser seemingly locks up, telling you to call Microsoft
at a certain number, do NOT call the number!! Instead, close your web
browser, clear the cache and cookies, do a full virus scan, then restart
the browser. You may also want to reboot the computer afterwards.

***

Serious Security: Phishing without links - when phishers bring along
their own web pages

How do you "check the URL before you click" if the web page you're
visiting is already on your own computer? 

***

#BeCyberSmart - why friends don't let friends get scammed

Friends don't let friends get scammed. Because cybercrime hurts us all.

***

REvil ransomware crew dangles $1,000,000 cybercrime carrot

When a company pays a multimillion dollar ransomware blackmail demand, 
where do you think the money goes?

***
	
Naked Security Live - "SMS scams: keep yourself and your family safe!"

Naked Security Live - here's the recorded version of our latest video.
Enjoy.

***
	
Blast from the past! Windows XP source code allegedly leaked online

Windows XP source code! Fair game to take a peek, or best to look away?

***

SMS phishing scam pretends to be Apple "chatbot" - don't fall for it!

If you got someone else's "free offer" in what looked like a misdirected
message, would you take a peek?

***

Naked Security Live - "The Zerologon hole: are you at risk?"

Naked Security Live - here's the recorded version of our latest video. 
Enjoy.

***

A real-life Maze ransomware attack - "If at first you don't succeed..."

The crooks wanted $15,000,000. They didn't get it. Huzzah!

***
	
Zerologon - hacking Windows servers with a bunch of zeros

Cryptography is hard. And cryptographic blunders can be hard to spot. 
This one was there for years...

***
--- SBBSecho 3.11-Win32
 * Origin: The Thunderbolt BBS - tbolt.synchro.net (454:1/33)

.