--- title: "Cyber Security News Update, Week 26 of 2020 | DuoCircle" description: "This week’s scam target? Sneakers. The trap? Free sneakers." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/" --- Quick Answer Sneakerhead phishing offers free Adidas Yeezy and Nike Air Force shoes through cloned brand sites that harvest payment data. Truist (formerly BB&T) customers are being phished with fake account-suspension emails. Server admins are receiving fake DigitalOcean and Linode 'verify your billing' messages that drop credential-stealing pages. LinkedIn fake-job scams continue to target job seekers, asking for Social Security numbers during 'onboarding.' Verizon's 2020 DBIR reporting on 86% financially motivated breaches was again referenced. The City of Florence, Alabama paid $300,000 in Bitcoin after a DoppelPaymer ransomware attack. And the CIA was impersonated in a sextortion campaign demanding Bitcoin payments to drop fabricated child-exploitation charges. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2026%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2026%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2026%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F "Share via Email") ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2700.jpg) This week’s scam target? Sneakers. The trap? Free sneakers. From [Hype Beast](https://hypebeast.com/2018/6/adidas-cyber-phishing-scam), “According to welivesecurity, messages are being sent that claim adidas is giving away 2,500 pairs of sneakers to honor its 69th anniversary. _The process begins from a suspicious link on WhatsApp to a site that gathers your geolocation and IP address, that eventually leads to an archaic four-question survey that qualifies the individual for the free shoes_. Of course, no shoes will ever be delivered to round out the scheme.” If it sounds too good to be true… ## BB&T Phishing Scam Branch Banking and Trust Company (BB&T) was used as the launching point for a **phishing scam** this week. From [Scamicide](https://scamicide.com/2020/06/18/scam-of-the-day-june-19-2020-bbt-phishing-email/), “_The email is a scam and if you click on the links contained in the email, you will either be prompted to provide personal information that will be used to make you a victim of identity theft or alternatively_, merely by clicking on the link, you will download **keystroke logging malware** that will steal your personal information from your computer or smartphone and use it to make you a victim of identity theft.” Just don’t click. ## Server Admin Scam If you receive an email that says it contains a “confidential image,” _just know that the image is not confidential and the email is a scam_. From Hoax-Slayer, “According to this email, the server administrator has sent you a confidential image. Supposedly, you can click a button in the email to view the image. The email includes the logo for the popular web hosting system cPanel. However, _the email is not from any legitimate server administrator and has no connection to cPanel_. Instead, the message is a **phishing scam** designed to steal your email account login credentials.” Just don’t click [![phishing scam](https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2600.jpg)](https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2600.jpg) ## Phishing Phrontier More and more we’re seeing **phishing attacks** being initiated by something other than an email. This week’s example comes from [CPO Magazine](https://www.cpomagazine.com/cyber-security/voicemail-phishing-attacks-threatens-100000-inboxes-leaving-remote-workers-particularly-vulnerable/). “A large number of remote workers in particular have fallen victim to a new brand of **cyberattack involving voicemail** in recent weeks. The new threat, which comes in the form of voicemail phishing attacks, stands as the most recent _attempt by cybercriminals to ride the wave of new targets brought about by a large number of employees relying on digital communication_ platforms like Zoom, Microsoft Teams, Slack, and Private Branch Exchange (PBX) in the wake of COVID-19.” ## LinkedIn Fake Job Scam Aerospace and defense employees sometimes look for new jobs, and the hackers know it. And that’s probably why they used **fake job offers** on LinkedIn to reel in their prey. From [SC Magazine](https://www.scmagazine.com/home/security-news/apts-cyberespionage/cyber-snoops-targeted-aerospace-defense-employees-with-fake-job-offers-on-linkedin/), “A cyber espionage operation used fake job offers, sent via LinkedIn messages, to target employees at aerospace and military companies in Europe and the Middle East. To trick prospective victims, _the attackers created fraudulent LinkedIn accounts impersonating human resources or hiring managers from various aerospace and defense companies_, including Collins Aerospace and General Dynamic. Then they used LinkedIn’s messaging feature to reach out to targeted employees and offer an employment opportunity, in hopes of getting them to open a **malicious file** sent either directly through LinkedIn or via a combination of email and OneDrive.” ## Body Count Poor love-struck Aussies. They’re only crime was wanting to be in love and how did they get repaid? By getting scammed out of **$11 million**. From [9 News in Australia](https://www.9news.com.au/national/australians-scammed-11-million-during-coronavirus-pandemic/48424447-e0f2-4633-9111-ef306feca3cf), “Australians were nefariously stripped of more than $11 million in scams last month, with fake investment schemes and the hope of romance the most lucrative criminal ruses. _Phishing was the most reported type of scam_. Those most at risk of being ripped off were the elderly, aged over 65, with adults aged 35-44 next most vulnerable without any [email security services](/).” The younger ones were no doubt the ones in love, or so they thought. ## Alabama Ransomware Attack Well, another city in Alabama wasn’t properly prepared to fight off a **ransomware attack** and what was their penalty? _How about $300,000_. From [Security Week](https://www.securityweek.com/alabama-city-pay-300000-ransom-computer-system-hack), “_A city in northern Alabama will pay a ransom worth $300,000 in Bitcoins in response to a hack of its computer system_. Florence City Council voted unanimously at an emergency meeting Wednesday evening to make the payment from the city’s insurance fund in an effort to preserve information tied to its city workers and customers.” Let that be a lesson to you. [![Ransomware Attack](https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2500.jpg)](https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2500.jpg) ## CIA Phishing Attack You have to laugh when the so-called experts get taken to the cleaner, and that’s exactly what happened to the CIA this week, when a group tasked with protecting secrets, didn’t. From [Security Week](https://www.securityweek.com/cia-unit-crafts-hacking-tools-didnt-protect-itself), “_A specialized CIA unit that developed hacking tools and cyber weapons didn’t do enough to protect its own operations and wasn’t prepared to respond when its secrets were exposed_, according to an internal report prepared after the worst **data loss** in the intelligence agency’s history.” Like I said, you have to laugh. And that’s the week that was. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2026%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-26-of-2020%2F) Copy Related Articles - [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg) Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/) - [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg) April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/) - [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg) Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/) - [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg) Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/) ## Related Articles [ News 3m Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[ News 1m April Spam Filtering Uptime Report May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[ News 2m Changes to Spam Filtering Technology Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[ News 4m Cyber Security News Update, Week 1 of 2020 Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 26 of 2020","description":"This week’s scam target? Sneakers. The trap? Free sneakers.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/","datePublished":"2020-06-26T20:09:46.000Z","dateModified":"2025-05-16T10:56:52.000Z","dateCreated":"2020-06-26T20:09:46.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":816,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2700.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 26 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 26 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 26 of 2020","description":"This week’s scam target? Sneakers. The trap? Free sneakers.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/","datePublished":"2020-06-26T20:09:46.000Z","dateModified":"2025-05-16T10:56:52.000Z","dateCreated":"2020-06-26T20:09:46.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-26-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":816,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/06/SPF-record-checker-2700.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```