---
title: "Cyber Security News Update, Week 14 of 2021 | DuoCircle"
description: "Cybercrimes have no end, and malicious attack schemes always manage to top the list of cyber news."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/"
---

Quick Answer

Week 14 of 2021 covered: US prosecutors indicting 21-year-old Swiss hacker Till Kottmann for identity theft, wire fraud, and computer fraud after he posted footage from breached Verkada, Nissan, and Intel systems and admitted involvement in attacks on at least eight organizations; BYU Professor D.J. Lee's Concurrent Two-Factor Identity Verification (C2FIV), a neural-network model that combines facial identity with a 1-2 second facial-motion clip and reaches 90% accuracy across 8,000 clips from 50 participants; an IRS phishing scam targeting tax preparers with fake 'IRS Tax E-Filing' emails harvesting EFINs and driver's license numbers to file fraudulent returns; an $11,000 TikTok bug bounty paid to 18-year-old researcher Sayed Abdelhafiz for high-impact one-click XSS flaws in the Android app; the Delhi Police Cyber Crime Unit arresting 34 fake call-center workers across two Uttam Nagar offices for impersonating Apple and McAfee support and stealing $1.38 million from US, UK, and Canadian victims via gift cards and Bitcoin; and a UK National Insurance phone-and-email scam mining PII from victims, with Action Fraud advising email authentication and immediate hang-ups.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2014%20of%202021&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2014%20of%202021 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2014%20of%202021&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2021/03/spf-record-checker-6985.jpg) 

Cybercrimes have no end, and _malicious attack schemes always manage to top the list of cyber news_. This week’s cyber headlines are another eye-opener for those without any **robust cybersecurity** measures in place to keep their information assets secure.

## U.S. Prosecutors Indict A Young Swiss Hacker

Till Kottmann, a _21-year-old Swiss hacker was recently indicted by U.S. prosecutors with charges of identity theft, wire fraud, and attempted computer fraud and abuse_. Kottmann shares updates of his cybercrimes on social media. The prosecutors could match his online post with the live recordings he shared with Reuters of an Alabama jail and a Tesla factory after illegally accessing Verkada’s administrative system. He [confesses to attacking](https://www.reuters.com/article/us-usa-hacker/swiss-hacker-indicted-after-claiming-credit-for-breaching-nissan-intel-idUSKBN2BB00Y?&web%5Fview=true) Verkada, Nissan Motor Co, and Intel Corp. and _being involved in accessing the internal files of over eight organizations_.

He has been accused of attacking dozens of organizations and government agencies. The Swiss authorities took cybersecurity measures and raided his house last week. For further legal proceedings, Kottmann will be brought to the U.S. soon. Clearly, his millennial ways of _posting everything online have brought his downfall!_

## New Facial Movement Detector Promises Added Security

_The face recognition feature in smartphones has been misused by adversaries so far where they get into a victim’s phone_ while they are asleep or use a photo they uploaded on social media to unlock the device. But the latest research by Professor D.J Lee at the US-based Brigham Young University (BYU) promises to set the world free from such manipulation!

The new Concurrent Two-Factor Identity Verification (C2FIV) includes a person’s facial identity and some facial motion recorded in a 1-2 second long video (such as a smile, a wink, a lip movement, or any other random action). _This two-factor verification promises to strengthen the security of smartphones_.

Lee’s revolutionary C2FIV model uses an integrated neural network framework to identify and [retain facial features](https://ciso.economictimes.indiatimes.com/news/smiles-winks-in-face-recognition-could-increase-phone-security/81624910) and movements concurrently. Once the new and recorded or embedded features match, the device gets unlocked. Lee and his PhD scholar Zheng Sun have recorded over 8,000 video clips from 50 participants and divided their facial movements into positive and negative datasets. So far, the neural network framework has been **90% accurate**. _They are confident that this unique layer of cybersecurity shall be effective as the network gets improved_.

[![email scam](https://media.mailhop.org/duocircle/images/2021/03/sender-policy-framework-4935.jpg)](https://media.mailhop.org/duocircle/images/2021/03/sender-policy-framework-4935.jpg)

## Tax Payers Beware Of Fake IRS Emails

The Internal Revenue Service (IRS), U.S., is being targeted by adversaries for a new **email scam**. These scams attack tax professionals with fake IRS emails that require immediate action.

In this attack, a fake email from ‘IRS Tax E-Filing’ urges tax preparers to provide the E-Filing Identification Number (EFIN) and driver’s license number to stop their tax preparer’s E-Filing access from [getting disabled](https://securityintelligence.com/news/irs-scam-emails-ask-for-efin/?web%5Fview=true). _Once a tax preparer responds to the email, the attackers are likely to impersonate him/her next and file fake tax returns_ (for refunds, obviously). Hence, the IRS warns tax professionals to look out for such malicious emails and use [email security services](/) to keep malicious actors at bay.

## Young Researcher Comes To The Rescue, TikTok Duly Rewards

The 18-year-old Egyptian cybersecurity researcher Sayed Abdelhafiz has recently earned a TikTok **bug bounty of $11,000** for disclosing some major cross-site scripting (XSS) vulnerabilities in the TikTok app’s Android version. _If exploited, these vulnerabilities will enable an attacker to execute arbitrary code on the victim’s device by merely asking them to click on a malicious link_.

_One-click by the victim shall be enough to let the attackers do everything on the user’s device that TikTok_ has permission to do. For instance, if TikTok has been given [storage permission](https://www.securityweek.com/tiktok-pays-out-11000-bounty-high-impact-exploit?&web%5Fview=true) on a device, the attackers will access all storage files. Sayed describes it as a high-impact 1-click exploit that _lets adversaries take over the users’ device_. Though Sayed received his due credit, TikTok had barred him from disclosing his findings until they had rolled out a fix for the **cybersecurity flaws** in their system.

## Fake Call Centres Loot U.S., U.K., and Canada Residents

_The Cyber Crime Unit of the Delhi Police (India) has recently arrested 34 fake call center employees for conning foreigners in the name of Apple and McAfee antivirus subscriptions_. A typical scam would involve the attackers calling the victims or sending them pop-up alerts saying that their device is no longer protected or that they will be arrested for illegal transactions in their bank accounts. Fearing arrests, the victims would make the said payment into Google gift cards or Bitcoin, which the victims would then transfer to other accounts. _These fraudsters have robbed foreign nationals of over $1.38m to date_.

The police raided two offices in an Uttam Nagar building where one office Kshitiz Bali, 32, ran one office on the third floor, another run by his associates Abhishek Negi, 28, and Dhananjay Negi, 16 on the fourth floor. A total of [34 arrests](https://www.infosecurity-magazine.com/news/delhi-police-bust-call-center/?&web%5Fview=true) were made from both these offices where _the fake call center employees impersonated even law enforcement officers_! Such conniving scams make us realize the importance of adopting **robust cybersecurity** tools!

[![Insurance scams](https://media.mailhop.org/duocircle/images/2021/03/spf-record-6783.jpg)](https://media.mailhop.org/duocircle/images/2021/03/spf-record-6783.jpg)

## U.K. Citizens Beware of National Insurance Scams

_A National Insurance scam is circulating in the U.K., which is on a hunt for people’s personally identifiable information (PII)_. Action Fraud, U.K.’s National Fraud & Cyber Crime Reporting Center has cautioned citizens for such National Insurance scams, which notifies them of their national insurance numbers’ so-called compromise.

Action Fraud askes the public to use email authentication and remain vigilant if such emails or calls reach them out of the blue. _It must be noted that no legitimate organization pressurizes clients or stakeholders to disclose personal details_. Sometimes, we don’t even need to disclose details ourselves, merely confirming our email, or DOB lets criminals [into our accounts](https://web.archive.org/web/20210514203357/https://hotforsecurity.bitdefender.com/blog/action-fraud-warns-of-ongoing-uk-national-insurance-scam-25534.html?web%5Fview=true). Citizens are advised to hang up the phone if faced with such suspicious calls and immediately report the incident to the relevant authorities.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2014%20of%202021&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-14-of-2021%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 14 of 2021","description":"Cybercrimes have no end, and malicious attack schemes always manage to top the list of cyber news.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/","datePublished":"2021-03-31T17:58:22.000Z","dateModified":"2025-05-26T18:01:37.000Z","dateCreated":"2021-03-31T17:58:22.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/"},"articleSection":"announcements","keywords":"","wordCount":971,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2021/03/spf-record-checker-6985.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 14 of 2021","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 14 of 2021","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 14 of 2021","description":"Cybercrimes have no end, and malicious attack schemes always manage to top the list of cyber news.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/","datePublished":"2021-03-31T17:58:22.000Z","dateModified":"2025-05-26T18:01:37.000Z","dateCreated":"2021-03-31T17:58:22.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-14-of-2021/"},"articleSection":"announcements","keywords":"","wordCount":971,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2021/03/spf-record-checker-6985.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```