---
title: "Cyber Security News Update, Week 34 of 2019 | DuoCircle"
description: "Been called to jury duty lately? Even if you haven’t, you might still get phished."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/"
---

Quick Answer

Cybersecurity headlines for the week of August 23, 2019\. The Citizens Journal warned of a Ventura County, CA jury-duty phishing scam that pressures targets via call and email under threat of fines or jail. A Pakistan-focused phishing wave impersonated FBR tax notices to harvest credentials. Fake LinkedIn job listings were used to deliver malware and harvest personal data from job seekers. A '404 error' phishing trick uses a fake browser error page to prompt the victim to enter credentials before continuing. Saskatoon, Canada lost about $1 million to a BEC scam in which fraudsters impersonated a contractor's CFO and rerouted a payment. Multiple US college and university systems reported phishing-driven account compromises during the back-to-school window.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2034%20of%202019&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2034%20of%202019 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2034%20of%202019&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F "Share via Email") 

![DuoCircle blog post image](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2441.jpg) 

Been called to jury duty lately? Even if you haven’t, **you might still get phished**. Last week, in Ventura County, CA, a _phishing scam was going around telling people that they missed their jury duty appointment_.

According to the [Citizens Journal](https://web.archive.org/web/20210921210938/https://www.citizensjournal.us/scam-alert-missed-jury-call-phishing-for-your-information/), “_In the calls and emails, recipients are pressured to provide confidential information, potentially leading to identity theft and fraud._ These calls and emails, which threaten recipients with fines and jail time if they do not comply are fraudulent and are not connected with the Camarillo Police Department or the Ventura County Sheriff’s Office.”

## Phishing Scam in Pakistan

One of the easiest ways to launch a _phishing campaign is to promise the target of the phishing campaign some money_. The latest example of this is a scam promising a tax refund to people in Pakistan.

According to an article in the [Express Tribune](https://tribune.com.pk/story/2034706/2-refund-phishing-scam-hits-nations-mailboxes/), “Sources said that the scam is being used to steal large amounts of money from the bank accounts of victims that follow the instructions in the emails sent by a gang of hackers.” This is the textbook definition of phishing.

## LinkedIn Phony Job Listings

Looking for a job? Congratulations, you just got phished. That’s the word from [Scamicide](https://scamicide.com/2019/08/14/scam-of-the-day-august-15-2019-linkedin-phishing-and-job-scams/). Not unsurprisingly, social media sites in general, and LinkedIn in particular, are being used to s**cam users via phishing emails**. According to Scamicide, “scams connected to LinkedIn involve phony job listings. _Security software company Symantec issued a warning about an increase of LinkedIn job scams_.” I’d imagine people looking for jobs are the least able to afford to be scammed.

[![phishing emails](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2442.jpg)](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2442.jpg)

## Phishing Phrontier

You always knew that getting hacked could cost you your money if you do not have a proper [email security service](/). _But did you know it could cost you your hearing?_ Apparently it can.

According to [Dark Reading](https://www.darkreading.com/attacks-breaches/hackers-can-hurt-victims-with-noise/d/d-id/1335498?%5Fmc=NL%5FDR%5FEDT%5FDR%5Fweekly%5F20190815&cid=NL%5FDR%5FEDT%5FDR%5Fweekly%5F20190815&elq%5Fmid=92430&elq%5Fcid=28171904)**, “**_Research presented at DEFCON shows that attackers can hijack Wi-Fi and Bluetooth-connected speakers to produce damaging sounds_. Matt Wixey, research lead for the PwC UK Cyber Security practice and a doctoral student, found that he could access the speaker and volume controls for a number of different devices and use them to produce sounds at volumes that could distract and annoy humans almost instantly, _damage human hearing with a relatively short exposure_.”

## 404 Error Phishing Scam

If there’s a clever technique that helps hackers exploit victims, you can be sure that eventually they will use it. Now comes [word](https://www.bleepingcomputer.com/news/security/microsoft-warns-of-phishing-attacks-using-custom-404-pages/) of a **phishing attack** that uses custom 404 pages. 404 pages are the pages you see when you try and go to a webpage that doesn’t it exist. They’re error pages.

Usually, these error pages just have a message saying the page you’re trying to reach doesn’t exist. But there’s no reason it has to have a message. It could have anything, including a login box to a fake website. And that’s exactly what Microsoft researchers discovered was happening in a recent phishing campaign. What’s clever about this technique is that it **“**_allows the phishers to have an infinite amount of phishing landing pages URLs_” which make it much harder to spot the phishing email.

## Body Count

_Hackers were at it again recently hitting the healthcare industry._ This time two different healthcare providers were hit on opposite sides of the U.S. The first was Grays Harbor Community Hospital and Harbor Medical Group, in Aberdeen, WA. The group was hit with a **ransomware attack** that encrypted patient information. The goods, if there is any, is that none of the information appears to have been stolen.

The other victim is NCH Healthcare in Naples, FL. According to an [article](https://www.scmagazine.com/home/security-news/ransomware/cyberattacks-hit-nch-healthcare-system-and-grays-harbor-community-hospital/?utm%5Fsource=newsletter&utm%5Fmedium=email&utm%5Fcampaign=SCUS%5FNewswire%5F20190819&hmSubId=01xQvtS0ero1&email%5Fhash=0da939dab246e8101d6090def505f6f5&mpweb=1325-9730-1896988) in SC Magazine, “dozens of hospital employees fell for a phishing scam that gave the malicious actors access to the facility’s payroll system. The Naples News reported **73 were victimized by phishing email.**” Do you think it might be time for them to invest in some [anti phishing software](/email/phishing-protection)?

## City of Saskatoon Scam

It’s not just organizations in the U.S. that got hit recently. [According to CTV News in Canada](https://saskatoon.ctvnews.ca/city-of-saskatoon-lost-over-1m-in-fraud-scheme-official-says-1.4551514), the City of Saskatoon lost over $1M in a fraud scheme.

“City manager Jeff Jorgenson told media Thursday afternoon that an apparent _fraudster had stolen the identity of the chief financial officer of a construction company whom the city deals with_. The unidentified scammer then contacted the city, asking to change the company’s banking information, _The $1.04-million payment from the city then went to the fraudster’s account_, rather than the company’s.” This is a classic example of **business email compromise** (BEC).

[![BEC ](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2443.jpg)](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2443.jpg)

## College/University Phishing Scams

They may produce smart citizens, but colleges don’t seem to be very smart when it comes to [phishing protection](/email/phishing-protection). Last week two colleges were **scammed for over $870,000** according to the [OCD Tech website](https://ocd-tech.com/2019/08/15/two-u-s-colleges-scammed-for-over-870000-in-spear-phishing-attack/). According to a [press release](https://www.justice.gov/usao-sdca/pr/fraudster-brought-back-kenya-face-jail-time-stealing-almost-750000-ucsd-through-spear) from The United States Department of Justice, an arrest had been made “of a cyber-criminal that had stolen $750,000 from the University of California San Diego (UCSD) through a carefully executed **spear-phishing campaign**.”

The article goes on to say that “another undisclosed school in Pennsylvania was taken for $123,643.77.” I can imagine why they wish to keep it undisclosed.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2034%20of%202019&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2019%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 34 of 2019","description":"Been called to jury duty lately? Even if you haven’t, you might still get phished.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/","datePublished":"2019-08-23T14:26:19.000Z","dateModified":"2025-05-20T15:05:32.000Z","dateCreated":"2019-08-23T14:26:19.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/"},"articleSection":"announcements","keywords":"","wordCount":855,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2441.jpg","caption":"DuoCircle blog post image","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 34 of 2019","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 34 of 2019","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 34 of 2019","description":"Been called to jury duty lately? Even if you haven’t, you might still get phished.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/","datePublished":"2019-08-23T14:26:19.000Z","dateModified":"2025-05-20T15:05:32.000Z","dateCreated":"2019-08-23T14:26:19.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2019/"},"articleSection":"announcements","keywords":"","wordCount":855,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-2441.jpg","caption":"DuoCircle blog post image","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```