--- title: "Cyber Security News Update, Week 29 of 2020 | DuoCircle" description: "Your computer and smartphone aren’t the only ways you can get scammed. You can also get scammed at the gas pump." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/" --- Quick Answer Abnormal Security flagged SurveyMonkey-themed phishing that hides credential-harvesting links inside legitimate survey infrastructure. A new voicemail phishing campaign sends fake voicemail-attachment notifications that drop credential-stealing pages. Verizon's 2020 DBIR data continues to anchor the trend reporting. Gas-pump credit-card skimmers have spiked, prompting an FTC consumer warning. And the recent Twitter compromise affecting accounts of Obama, Biden, Bezos, Musk, and others was traced to a coordinated social-engineering attack on Twitter staff that abused internal admin tools to push a Bitcoin scam. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2029%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2029%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2029%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F "Share via Email") ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/07/SMTP-server-mail-6845.jpg) _Your computer and smartphone aren’t the only ways you can get scammed. You can also get scammed at the gas pump_. This week the FTC issued a [warning](https://scamicide.com/2020/07/08/scam-of-the-day-july-9-2020-ftc-issues-warning-about-skimmers-at-gas-pumps/) about credit card skimmers at gas pumps. “Recently, the Federal Trade Commission (FTC) issued a warning about the dangers presented by skimmers on gas pumps. _Skimmers are small electronic devices that are easily installed by an identity thief on gas pumps, ATMs and other card reading devices_. The skimmer steals all of the information from old style magnetic strip credit card or debit cards which then enables the **identity thief** to use that information to access the victim’s bank account when the skimmer is used on a debit card. If a credit card is used, the identity thief can use the stolen information to access the victim’s credit card account. _Each skimmer can hold information on as many as 2,400 cards._” Pay attention at the pump. ## SurveyMonkey Phishing Scams _Have you ever been asked to take an online survey? Be careful, some of those surveys are used to phish you_. This according to [Abnormal Security](https://web.archive.org/web/20250212164236/https://abnormalsecurity.com/blog/abnormal-attack-stories-phishing-through-surveymonkey). [![email security services.](https://media.mailhop.org/duocircle/images/2020/07/spf-permerror-6824.jpg)](https://media.mailhop.org/duocircle/images/2020/07/spf-permerror-6824.jpg) “SurveyMonkey is a survey service that is normally used to host legitimate surveys. However, _sometimes attackers will utilize file sharing and surveying sites like SurveyMonkey to host redirect links to a **phishing webpage**_. By using these legitimate services, attackers can bypass email URL detection systems deployed by many [email security services](/).” ## Phishing Phrontier When we have good news, we feel compelled to share it. _You know how scammers use bogus domains to launch their phishing attacks_? Well this week [Microsoft](https://www.theregister.com/2020/07/08/microsoft%5Fsues%5Foffice%5F365%5Fphishers/) sued those same scammers to seize those same **bogus domains**. “_Microsoft has taken legal action to seize web domains being used to launch coronavirus-themed **phishing attacks**_. The Windows giant obtained an order from US courts allowing it to seize domains being used for phishing.” Good for your tech giant. ## Voicemail Phishing Scam _We’re always impressed when scammers can phish you WITHOUT having to send you an email_. Such is the case this week of the [Fake Voicemail Phishing Attack](https://www.grovenetworks.com/newsletter-content/phishing-attacks-masquerading-as-voip-voicemails). Here hackers are simply taking advantage of the fact that some systems email users with recordings of voice mails. “_The email comes in very much like it would from your phone system_. The subject line will say something like ‘New Voicemail from: (555) 555-5555’ (but with a real number) and attached will be a file that looks like it could be an audio clip of the voicemail. Be very wary of this. That file could contain **malware**. Some of these emails also contain links or buttons to click on to download the voicemail.” ## Body Count _What are the chances your credentials are available for sale on the dark web_? Pretty good after [news this](https://www.scmagazine.com/home/security-news/cybercrime/15b-credentials-available-on-dark-web-average-selling-price-below-16/) week that **15 billion credentials** are available on the dark web for as little as $16\. In case you’re wondering, that’s two credentials for everyone on Earth. How bad is it? “_Roughly one-third of the credentials, or about 5 billion, are unique_, according to [Digital Shadows](https://www.scmagazine.com/?s=Digital+Shadows), whose researchers reached these totals following an analysis of two-and-a-half years of advertised account credentials found across nine active and **defunct dark web marketplaces**.” Yeah, I think _it’s safe to say your credentials are for sale on the dark web_. _It’s one thing to accidently download some malware onto your smartphone. It’s quite another when that malware comes pre-installed_. But that’s exactly what seems to be happening to Android phones in the US. [![Security Week](https://media.mailhop.org/duocircle/images/2020/07/smtp-service-6824.jpg)](https://media.mailhop.org/duocircle/images/2020/07/smtp-service-6824.jpg) From [Security Week](https://www.securityweek.com/researchers-find-pre-installed-malware-more-android-phones-us), “Following a January report on malware found pre-installed on smartphones sold in the United States to budget-conscious users, _Malwarebytes has discovered another mobile device riddled with malware from the get-go_. The UMX U686CL phone, sold as part of the government-funded Lifeline Assistance program by Virgin Mobile, a subsidiary of Sprint, was being shipped to users with two **malicious programs** pre-installed: A Wireless Update application and a Settings app.” Stay safe out there. And that’s the week that was. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2029%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-29-of-2020%2F) Copy Related Articles - [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg) Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/) - [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg) April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/) - [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg) Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/) - [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg) Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/) ## Related Articles [ News 3m Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[ News 1m April Spam Filtering Uptime Report May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[ News 2m Changes to Spam Filtering Technology Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[ News 4m Cyber Security News Update, Week 1 of 2020 Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 29 of 2020","description":"Your computer and smartphone aren’t the only ways you can get scammed. You can also get scammed at the gas pump.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/","datePublished":"2020-07-17T20:44:16.000Z","dateModified":"2025-05-27T12:44:31.000Z","dateCreated":"2020-07-17T20:44:16.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":656,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/07/SMTP-server-mail-6845.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 29 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 29 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 29 of 2020","description":"Your computer and smartphone aren’t the only ways you can get scammed. You can also get scammed at the gas pump.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/","datePublished":"2020-07-17T20:44:16.000Z","dateModified":"2025-05-27T12:44:31.000Z","dateCreated":"2020-07-17T20:44:16.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-29-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":656,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/07/SMTP-server-mail-6845.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```