---
title: "Cyber Security News Update, Week 22 of 2020 | DuoCircle"
description: "Ever since the pandemic, phishing attacks on Amazon have skyrocketed. Afterall, more people are shopping online."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/"
---

Quick Answer

Cybersecurity stories from the week of May 28, 2020: US tech-support scams continued to target older consumers with fake antivirus pop-ups demanding payment for nonexistent infections. Phishing campaigns continued to ride pandemic ecommerce growth with Amazon impersonation lures. Researchers detailed EvilApp, an Android attack that bypassed Google two-factor authentication by hijacking session cookies after victims signed in to a malicious app. The Sanix breach exposed billions of credentials aggregated from prior leaks, fueling credential-stuffing campaigns. And EasyJet confirmed a breach exposing personal and payment details on roughly 9 million customers, including 2,200 with full credit-card data.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2022%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2022%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2022%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2020/05/sender-policy-framework-7503.jpg) 

_Ever since the pandemic, phishing attacks on Amazon have skyrocketed_. Afterall, more people are shopping online. Such is the [case](https://www.wandtv.com/news/police-warn-of-amazon-phishing-scam/article%5F00156af6-9a21-11ea-ade3-6be077270851.html) in Taylorville, Ill where “A new **email phishing scam** is making its way to people’s emails, according to the Taylorville Police Department.”

According to the report, “An email that looks like it’s from Amazon said there was a problem renewing their Amazon Prime Account. The email then gives the user a prompt to find the documents attached to follow on-screen instructions. _The instructions then ensure there isn’t a problem with the renewal by gaining personal information_.” Yeah, it’s a scam.

## US Tech Support Scam

“US Tech Support is a real company that provides tech support for your computer.” The **phishing email** pretending to be from them, not so much.

According to [Scamicide](https://scamicide.com/2020/05/18/scam-of-the-day-may-19-2020-us-tech-support-phishing-email/), the “email, which was sent to us by a Scamicide reader is not from US Tech Support, but instead is a _phishing email designed to make you believe that there is an emergency that requires your immediate attention._ Anyone receiving this email who was not a customer of US Tech Support would be tempted to call the telephone number found in the email to cancel. If you call the phone number listed in the email, which, by the way, is not a telephone number used by US Tech Support, you will be asked for personal information that will be used to make you a victim of **identity theft**.” Pretty clever.

[![phishing email](https://media.mailhop.org/duocircle/images/2020/05/spf-permerror-7505.jpg)](https://media.mailhop.org/duocircle/images/2020/05/spf-permerror-7505.jpg)

## Phishing Phrontier

From the hard-to-believe department, _the pandemic has actually lowered the incidence of one common annoyance: robocalls_. According to an article on [Security Week](https://www.securityweek.com/coronavirus-pandemic-claims-another-victim-robocalls), “Industry experts say robocalls are way down, scam calls as well as nagging from your credit-card company to pay your bill. The coronavirus pandemic has inflicted millions of job losses, and scammers have not been immune.” Do you know what they call that? A silver lining.

## EvilApp Scam

You have to know that something called “EvilApp” is probably, well, evil. EvilApp is an Android app used to grab session cookies from any website. And _with session cookies, the bad guys never have to log into your account. It’s wide open_.

Ironically, the app comes with a [legal disclaimer](https://www.kitploit.com/2020/05/evilapp-phishing-attack-using-android.html). “_Usage of EvilApp for attacking targets without prior mutual consent is illegal_. It’s the end user’s responsibility to obey all applicable local, state and federal laws. _Developers assume no liability and are not responsible for any misuse or damage caused by this program_.” Just like selling a gun and saying don’t shoot it.

## Body Count

_This was not a good week for unemployment website data leaks._ First Arkansas and Illinois [copped](https://www.scmagazine.com/news/network-security/arkansas-illinois-covid-19-unemployment-websites-leak-data) to the fact that “both reportedly **exposed sensitive citizen data** after failing to adequately secure web services that the states urgently propped up in order to process applications for the federal Pandemic Unemployment Assistance program.”

Not to be outdone, three more states suffered the same [fate](https://www.scmagazine.com/home/security-news/colorado-and-ohio-become-latest-states-to-disclose-pua-program-data-leaks/). “_Colorado, Ohio and Florida have become the latest states to disclose the accidental exposure of information belonging to citizens_ who applied to the federal Pandemic Unemployment Assistance program as a means of seeking some financial security during the ongoing COVID-19 crisis.” Five down, 45 to go.

[![Phishing Phrontier](https://media.mailhop.org/duocircle/images/2020/05/spf-flattening-7506.jpg)](https://media.mailhop.org/duocircle/images/2020/05/spf-flattening-7506.jpg)

## Data Breach by Sanix

If there was a gold medal given to hackers, the recipient would have to be the hacker called “Sanix.” Why is that? Well, just take a look at his accomplishments. “_A database with **773 million email addresses** and 21 million unique passwords were hacked by Sanix and were almost sold last year_. It was clarified that the **87-gigabyte database** was only a fraction of the stolen data the hacker collected, as stated by the officials.” Impressive, right?

The bad news for Sanix? He was caught by Ukraine’s Security Service. Time to give the gold medal back.

## British Airline Breach

Just because airlines have stopped flying, doesn’t mean they can’t have a data breach. And that’s exactly what happened to British airline easyJet. According to a [report](https://www.scmagazine.com/home/security-news/british-airline-easyjet-breached-data-of-9-million-customers-compromised/), “_An attack against British airline easyJet by a highly sophisticated source’ accessed the email addresses and travel details of approximately **nine million customers**, including credit card details of 2,208 customers._” Ouch.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2022%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-22-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 22 of 2020","description":"Ever since the pandemic, phishing attacks on Amazon have skyrocketed. Afterall, more people are shopping online.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/","datePublished":"2020-05-29T14:18:24.000Z","dateModified":"2025-05-19T12:00:00.000Z","dateCreated":"2020-05-29T14:18:24.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":696,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/05/sender-policy-framework-7503.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 22 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 22 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 22 of 2020","description":"Ever since the pandemic, phishing attacks on Amazon have skyrocketed. Afterall, more people are shopping online.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/","datePublished":"2020-05-29T14:18:24.000Z","dateModified":"2025-05-19T12:00:00.000Z","dateCreated":"2020-05-29T14:18:24.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-22-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":696,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/05/sender-policy-framework-7503.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```