---
title: "Cyber Security News Update, Week 2 of 2020 | DuoCircle"
description: "There were pre-holiday phishing attacks and holiday phishing attacks. So, it should come as no surprise that there are post-holiday phishing attacks."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/"
---

Quick Answer

Cybersecurity stories from the week of January 9, 2020: a phishing campaign impersonated FedEx with fake delivery notifications carrying credential-harvesting links. Account-recovery scams abused phone-number recovery flows to take over Google and other accounts by tricking victims into reading aloud verification codes. Researchers warned of US-targeted phishing tied to escalating tensions with Iran. And Honda confirmed a misconfigured Elasticsearch database had exposed approximately 26,000 records of North American vehicle owners, including names, email addresses, and vehicle identification numbers, before being secured. The week's theme was that holiday and post-holiday surge traffic continued to drive both phishing volume and unintended data exposures.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%202%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%202%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%202%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F "Share via Email") 

![Cyber security News](https://media.mailhop.org/duocircle/images/2020/01/windows-smtp-service.jpg) 

There were [pre-holiday phishing attacks](/phishing-protection/they-should-call-black-friday-phish-friday/#more-14546) and holiday **phishing attacks**. So, it should come as no surprise that there are [post-holiday phishing attacks](https://www.klfy.com/eye-on-scams/eye-on-scams-phishing-emails-target-shoppers-with-post-holiday-offer/). According to KLFY.com, _phishing emails are targeting shoppers with post-holiday offers_.

“Here’s how the scam works: You receive an unsolicited email or text message that appears to be from a major retailer claiming you have a new reward. Experts have seen scammers use the names of Amazon, Kohls, and Costco… but any company can be spoofed. You open the message, and it looks real. It includes a company logo, colors, and a link to claim the reward points or gift from your recent holiday shopping.” You’ve been warned.

## FedEx Breach

Receiving an email from FedEx is not uncommon, especially if you do business with them. So, it should come as no surprise that hackers [used a FedEx email](https://scamicide.com/2020/01/01/scam-of-the-day-january-2-2020-federal-express-phishing-email/) this week to launch a **phishing campaign**.

According to Scamicide, “If you look closely at the email, you will note that even though it has the Federal Express logo and looks quite official, there are a number of tip offs that this is indeed a phishing scam. What is not shown on the email is that it is sent from an address that is not that of Federal Express.” Always check the return address or the better choice is to install [email security service](/).

[![ phishing campaign](https://media.mailhop.org/duocircle/images/2020/01/hosted-email-server-1382.jpg)](https://media.mailhop.org/duocircle/images/2020/01/hosted-email-server-1382.jpg)

## Recovery Number Scam

From Hoax-Slayer, the latest scam this week is the **‘Add Recovery Number’ Email Account Phishing Scam.** “_Scammers are distributing fake admin notifications recommending that you add a recovery number to your email account_. Supposedly, this is a new security measure designed to keep your account safe. The message includes a link that will supposedly allow you to add your mobile number as requested. It warns that, if you don’t add the recovery number, your account will be deactivated and your emails will be lost permanently. Clicking the link opens a scam website that asks for your email address and email account password.”

## Phishing Phrontier

First it was banks, then municipalities and now it’s…medical schools? That’s the latest from Science World Report, which reported that “UNC-Chapel Hill School of Medicine, located within the University of North Carolina, recently reported a potential **month-long phishing attack**, which _potentially breached the protected health information of over 3,700 patients_.”

The report went on to say “Within the emails was personal information regarding treatments received, as well as important identity-related information, including their names and dates of birth, addresses, health insurance numbers, social security numbers, bank account numbers and credit card details.” You know, nothing important.

## Iran’s Response

_If you get hit with a cyberattack in the near future, it could be from Iran_, warns the [DHS](https://www.scmagazine.com/home/security-news/dhs-warns-iran-retaliation-could-include-cyberattacks/). “After the killing Iranian General Qasem Soleimani, the Department of Homeland Security Saturday issued a National Terrorism Advisory System [Bulletin](https://www.dhs.gov/sites/default/files/ntas/alerts/20%5F0104%5Fntas%5Fbulletin.pdf) warning of retaliation, including cyberattacks. _Iran maintains a robust cyber program and can execute cyberattacks against the United States_,” DHS warned.

## Body Count

Not a good week for restaurants. First, [Over 50 Islands Restaurants Hit by Payment Card Breach](https://www.securityweek.com/over-50-islands-restaurants-hit-payment-card-breach). “California-based burger chain Islands Restaurants recently informed customers that it had identified a piece of malware on the **point-of-sale** (PoS) systems used for payment card transactions at its restaurants. _The malware used by the cybercriminals was apparently designed to steal data stored on a card’s magnetic stripe as it went through the system_.”

Then, Houston-based steakhouse restaurant company Landry’s was [hit with a point-of-sale malware attack](//www.scmagazine.com/home/security-news/data-breach/pos-malware-attack-landrys-restaurants/). Maybe it’s time to start using cash.

[![malware attack](https://media.mailhop.org/duocircle/images/2020/01/hosted-email-server-1383.jpg)](https://media.mailhop.org/duocircle/images/2020/01/hosted-email-server-1383.jpg)

## Honda Car Owners Data Leak

The cars guys, not wanting the food guys to grab all the attention, apparently wanted to get in on the action of making sure their customers’ data was at risk also. “An Elasticsearch cluster containing information on [Honda owners in North America](https://www.securityweek.com/data-honda-owners-north-america-exposed-online) was recently found to be accessible from the Internet without any authentication. The database stored names, contact details, and vehicle information, all of which could be accessed without a password.” Maybe it’s time to go have lunch at Islands.

Is it even [news](https://www.securityweek.com/exposed-database-stored-information-267-million-facebook-users) anymore when Facebook users data are in jeopardy? As was the case with Honda, “An unprotected Elasticsearch database that was accessible from the Internet was recently found to store information on **over 267 million** Facebook users, according to tech website Comparitech. The database contained user IDs, phone numbers, and names, all of which could be accessed by anyone, without a password or any other form of authentication.” No lunch, no cars, no social media.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%202%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-2-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 2 of 2020","description":"There were pre-holiday phishing attacks and holiday phishing attacks. So, it should come as no surprise that there are post-holiday phishing attacks.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/","datePublished":"2020-01-10T19:29:38.000Z","dateModified":"2025-06-02T11:07:08.000Z","dateCreated":"2020-01-10T19:29:38.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":750,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/01/windows-smtp-service.jpg","caption":"Cyber security News","width":900,"height":506},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 2 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 2 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 2 of 2020","description":"There were pre-holiday phishing attacks and holiday phishing attacks. So, it should come as no surprise that there are post-holiday phishing attacks.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/","datePublished":"2020-01-10T19:29:38.000Z","dateModified":"2025-06-02T11:07:08.000Z","dateCreated":"2020-01-10T19:29:38.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-2-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":750,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/01/windows-smtp-service.jpg","caption":"Cyber security News","width":900,"height":506},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```