---
title: "Cyber Security News Update, Week 28 of 2020 | DuoCircle"
description: "If someone offers you free DNSSEC, just know, it’s a scam. This according to Bleeping Computer."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/"
---

Quick Answer

An Airbnb phishing scam offers fake host insurance to harvest credit card numbers and ID. Bleeping Computer documented a campaign offering free DNSSEC upgrades to bloggers and site owners, used to steal hosting-provider credentials. Adobe Creative Cloud users are being phished with fake license-expiration warnings. Verizon's 2020 DBIR continues as the trend baseline. Pop star data is for sale on the dark web after entertainment law firm Grubman Shire Meiselas & Sacks was hit by REvil. And BMW connected-car owner records, including VINs and service histories, are being advertised on Russian forums; BMW says no production systems were breached.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2028%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2028%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2028%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2020/07/SMTP-email-server-6824.jpg) 

_If someone offers you free DNSSEC, just know, it’s a scam_. This according to [Bleeping Computer](https://www.bleepingcomputer.com/news/security/clever-phishing-scam-targets-websites-with-free-dnssec-offer/). “A very clever **phishing campaign** targets bloggers and website owners with emails pretending to be from their hosting provider who wants to upgrade their domain to use secure DNS (DNSSEC).”

“As it’s possible to determine who is hosting a domain for a website via the WHOIS records, IP addresses, and HTTP headers, _the email scam is highly targeted and impersonates the specific hosting company used by a website._” If it seems too good to be true…

## Airbnb Scam

_While the pandemic has kept most people from traveling and using services like Airbnb to find accommodations, it hasn’t stopped everyone_. But we bet one woman wished it had stopped her before she was scammed. From [Q13 Fox](https://www.q13fox.com/news/woman-falls-victim-to-fake-airbnb-site-phishing-fraud-says-no-ordinary-rental-scam) in Seattle, “Woman falls victim to fake Airbnb site **phishing fraud**, says no ordinary rental scam.”

[![email security service](https://media.mailhop.org/duocircle/images/2020/07/dkim-record-check-3471.jpg)](https://media.mailhop.org/duocircle/images/2020/07/dkim-record-check-3471.jpg)

It started when the woman, Summer Burt, found a listing on Craigslist but the owner told her to rent it through Airbnb and emailed her a malicious link as there was no [email security service](/) installed. “Burt said _the fake site looked like an exact clone of the real one, and at that point, there were no red flags for her_. She was then asked to wire money through a bank transfer, so she sent the man his first month’s rent and a security deposit through the site.” **Total damage: $6,000**. Pay attention out there.

## Phishing Phrontier

It’s always a little scary when you can be the victim of **ransomware** without ever having to click on a link, but it’s real. From [Security Week](https://www.securityweek.com/try2cry-ransomware-spreads-usb-drives), “_G Data security researchers have identified a new ransomware family that attempts to spread using infected USB drives_. The new piece of ransomware appears related to the ‘Stupid’ ransomware family, _which is available in open-source on GitHub._” So, not only does it use a USB drive, but it’s available as an open source exploit in GitHub. Be really careful what you put in your USB slots.

## Adobe Phishing Attack

The latest in **phishing exploits**? How about the “redirect.” According to [SlashNext](https://www.slashnext.com/blog/threat-discovery-attackers-are-abusing-adobe-open-redirect-service-to-serve-phishing/), a redirect is where “cybercriminals leverage legitimate commercial infrastructure sites to avoid detection and host the growing number of **phishing attacks** they launch.” _The latest infrastructure to be used? Adobe._

“SlashNext discovered a new outbreak where attackers were found to be luring users to Adobe’s open redirect services (hosted at t-info\[.\]mail\[.\]adobe.com) through emails\[1\] as a means to redirect to various **malicious sites**. When a potential victim clicked on the link, it immediately began executing a number of redirects that would send the user to one of several different malicious webpages.”

## Body Count

[![HIPAA Journal](https://media.mailhop.org/duocircle/images/2020/07/dkim-selector-6824.jpg)](https://media.mailhop.org/duocircle/images/2020/07/dkim-selector-6824.jpg)

_Hackers were at it again this week going after the healthcare industry._ This time in North Carolina and Texas. According to the [HIPAA Journal](https://www.hipaajournal.com/30000-patients-phi-exposed-in-nc-and-tx-phishing-attacks/), “Claremont, NC-based Choice Health Management Services, a provider of rehabilitation services and operator of several nursing homes in North and South Carolina, has experienced an **email security breach** affecting employees, and current and former patients.”

“The Houston, TX federally qualified health center, Legacy Community Health, is notifying approximately **19,000 patients** that some of their protected health information may have been accessed by an unauthorized individual who gained access to the email account of one of its employees.” _When are these healthcare providers going to learn?_

## Celebrity Data Breach

Just because you’re rich and famous, that won’t protect you from hackers. Such is the case with LeBron James. According to [SC Magazine](https://www.scmagazine.com/home/security-news/cybercrime/lebron-james-among-the-1st-stars-to-have-their-stolen-law-firm-files-put-up-for-auction/), “The Sodinokibi/REvil **ransomware gang** has apparently made good on its threat to auction off files it lifted from celebrity law firm Grubman Shire Meiselas & Sacks. _The group on July 1 reportedly placed legal documents corresponding to Nicki Minaj, Mariah Carey and LeBron James up for bid_, with the starting price set at $600,000 per lot.” Nobody is immune.

What’s interesting here is the way the crooks are now monetizing their booty. “_Auctioning off stolen data creates another potential avenue for monetization while also ratcheting up pressure on victims to pay or at least negotiate._”

## BMW Owners Data Sale

_It’s not just the immensely rich that are victims of this new type of extortion, but also the merely rich_, like BMW owners. Also from [SC Magazine](https://www.scmagazine.com/home/security-news/bmw-customer-database-for-sale-on-dark-web/), “A **database of 384,319** BMW car owners in the U.K. is being offered for sale on an underground forum by the KelvinSecurity Team hacking group, according to KELA, a darknet threat intelligence firm, based in Tel Aviv.”

“The hacking group, which last week tried to sell databases related to U.S. business consulting firm Frost & Sullivan, made the BMW data available, including initials and last names, emails, addresses, vehicle numbers, dealer names, among other information.”

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2028%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-28-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 28 of 2020","description":"If someone offers you free DNSSEC, just know, it’s a scam. This according to Bleeping Computer.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/","datePublished":"2020-07-10T14:52:38.000Z","dateModified":"2025-05-27T13:22:57.000Z","dateCreated":"2020-07-10T14:52:38.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":787,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/07/SMTP-email-server-6824.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 28 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 28 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 28 of 2020","description":"If someone offers you free DNSSEC, just know, it’s a scam. This according to Bleeping Computer.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/","datePublished":"2020-07-10T14:52:38.000Z","dateModified":"2025-05-27T13:22:57.000Z","dateCreated":"2020-07-10T14:52:38.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-28-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":787,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/07/SMTP-email-server-6824.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```