---
title: "Cyber Security News Update, Week 20 of 2020 | DuoCircle"
description: "Do you use Adobe Cloud? Have you received an email saying you’ve been sent files via Adobe Cloud recently? If the answer to both is “yes."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/"
---

Quick Answer

Cybersecurity stories from the week of May 14, 2020: Microsoft customers were hit with phishing emails impersonating Office 365 and Adobe Cloud sharing notifications to steal credentials. UK-themed COVID-19 phishing campaigns lured recipients with fake government refunds and benefit notices. Researchers detailed credit-card skimmers hidden inside favicon files on compromised ecommerce sites, evading static scanners. And Sedgwick County, Kansas warned residents of a gift-card scam in which attackers impersonated officials demanding payment in retail gift cards. The week reinforced that pandemic-era remote work expanded the surface for both consumer and enterprise phishing.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2020%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2020%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2020%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F "Share via Email") 

![cyber security](https://media.mailhop.org/duocircle/images/2020/05/email-sending-services-2077.jpg) 

Do you use Adobe Cloud? Have you received an email saying you’ve been sent files via Adobe Cloud recently? _If the answer to both is “yes.” you’ve probably been scammed._

According to Hoax-Slayer, “_the email is a **phishing scam** designed to steal your email account password and has no connection to Adobe_. If you click the link, you will be taken to a website that appears to host a business-related spreadsheet. However, the spreadsheet is greyed out and a pop-up box claims that you must enter your email password to gain full access. If you do enter your password, _it will be collected by the scammers and used to hijack your email account and any online services that are linked to it_.” Keep safe out there.

## Microsoft Phishing Scam

_Microsoft is one of the most abused brands by scammers and this week the scammers were trying to keep the Microsoft numbers up_. This week’s ploy? The “unusual sign-in activity” **phishing email**.

From Hoax-Slayer, “The email, which purports to be from the Microsoft Team, _claims that the company has detected something unusual about a recent sign-in to your Microsoft account_. However, the email is not from Microsoft and the claims about a suspect sign-in are just a **trick to get you to click** the link. _It is a phishing scam designed to steal your account login credentials_.”

[![Phishing Scam](https://media.mailhop.org/duocircle/images/2020/05/email-smtp-service-7894.jpg)](https://media.mailhop.org/duocircle/images/2020/05/email-smtp-service-7894.jpg)

## COVID-19 UK Phishing Scam

Getting laid off due to COVID-19 really stinks. Do you know what stinks worse? _Getting targeted by a phishing scam because you got laid off due to COVID-19_.

From [Meta Compliance](https://www.metacompliance.com/blog/scam-of-the-week-furlough-workers-targeted-with-phishing-scam/), “Just hours after the UK government opened its furlough scheme for applications, opportunistic fraudsters targeted organisations with a _devious furlough phishing scam with the aim of stealing bank account details_. In an effort to trick those seeking furlough support, the scam is cleverly disguised as an official email from HM Revenue & Customs, with the subject line ‘Your COVID-19 Relief Package’.” But, of course, it’s a **phishing scam** that can reach your inbox without [email security services](/). Told you it stinks worse.

## Phishing Phrontier

_We’re always impressed when scammers can do more with less_. Such is the case this week with a **vulnerability found** in Samsung mobile phones that requires…zero clicks.

From [SC Magazine](https://www.scmagazine.com/home/security-news/mobile-security/zero-click-vulnerability-found-in-samsung-mobile-phones/), “_The problem only exists within Samsung phones running Android version 4.4.4 or later._ This version was first offered in late 2014 but is still actively developed by the vendor with the latest version being pushed out on January 10, 2020 or just before Samsung was informed of the problem on January 28.” _Check your Samsung phone and get it patched_.

## Favicon Credit Card Skimming Malware

You may not know what a [favicon](https://en.wikipedia.org/wiki/Favicon) is, but you’ve seen them. They are the small icons associated with a website like the “W” in Wikipedia. Usually you can click on them to return to the home page. What would you say if I told you _favicons have been found to contain **credit card skimming malware**_? Turns out, it’s true.

According to [SC Magazine](https://www.scmagazine.com/home/retail/favicons-found-housing-credit-card-skimming-malware/), “_Malicious actors set up an entire online repository of malicious, credit card skimmer-laden favicons to lure in companies looking for a graphic to appear in their browser tab_.” It’s getting to the point where you can’t click on anything anymore without taking a risk.

[![Credit Card Skimming Malware](https://media.mailhop.org/duocircle/images/2020/05/SMTP-email-server-2047.jpg)](https://media.mailhop.org/duocircle/images/2020/05/SMTP-email-server-2047.jpg)

## Body Count

You just knew _the hackers weren’t going to slow down and take it easy on healthcare organizations during the COVID-19 pandemic_, regardless of what they promised. And of course, they haven’t.

From [SC Magazine](https://www.scmagazine.com/home/security-news/ransomware/no-reprieve-for-health-care-orgs-as-ransomware-hits-hospital-operator-plastic-surgeons/), “various ransomware groups attacked Fresenius, Europe’s largest private hospital operator, as well as a pair of U.S.-based plastic surgery clinics. _Germany-based Fresenius, has experienced disruptions across its global operations after being hit with the malicious Snake encryptor_. [DataBreaches.net](https://www.databreaches.net/) reported both of the plastic surgery attacks, speculating that perhaps the two incidents were made possible by the compromise of a shared vendor or business associate.”

## Sedwick County Gift Card Scam

If you’ve been following the news at all, then you know _scammers’ favorite payoff is no longer cash but is now gift cards_. Such was the case in Sedgwick County, Kansas which was recently hit by an **email scam**.

From the [kansas.com](https://www.kansas.com/news/local/crime/article242581521.html#adnrb=900000) website, \*\*“\*\*A Sedgwick County employee was duped into using **$800 in taxpayer money** to buy gift cards in a phishing scam. The email asked the person to buy gift cards to ‘recognize employees in the Sedgwick County Public Safety’.” They were just trying to do a good deed.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2020%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-20-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 20 of 2020","description":"Do you use Adobe Cloud? Have you received an email saying you’ve been sent files via Adobe Cloud recently? If the answer to both is “yes.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/","datePublished":"2020-05-15T15:18:49.000Z","dateModified":"2025-05-22T19:22:32.000Z","dateCreated":"2020-05-15T15:18:49.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":749,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/05/email-sending-services-2077.jpg","caption":"cyber security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 20 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 20 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 20 of 2020","description":"Do you use Adobe Cloud? Have you received an email saying you’ve been sent files via Adobe Cloud recently? If the answer to both is “yes.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/","datePublished":"2020-05-15T15:18:49.000Z","dateModified":"2025-05-22T19:22:32.000Z","dateCreated":"2020-05-15T15:18:49.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-20-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":749,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/05/email-sending-services-2077.jpg","caption":"cyber security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```