---
title: "Middle East University Emails, Kroll Data Compromise, Email Scams Update, Cybersecurity News [August 28, 2023] | DuoCircle"
description: "Here is a close examination of the latest email security news covering fraud emails, the Kroll cyberattack, the newest email scam in the Middle East."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/"
---

Quick Answer

Email security headlines for the week of August 28, 2023\. Proofpoint research found that 84% of the top 100 universities in the Middle East lack a published DMARC reject or quarantine policy, leaving students, faculty, and staff exposed to spoofed email. Risk and financial advisory firm Kroll disclosed a SIM-swapping attack against a single employee that exposed personal information for clients of FTX, BlockFi, and Genesis bankruptcy proceedings. A roundup of recent scams covered fake government cash offers, undelivered-package texts, and other lures making the rounds. Dallas police issued an advisory after scammers sent emails impersonating Mayor Eric Johnson to push fraudulent investment and grant requests.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Middle%20East%20University%20Emails%2C%20Kroll%20Data%20Compromise%2C%20Email%20Scams%20Update%2C%20Cybersecurity%20News%20%5BAugust%2028%2C%202023%5D&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F&title=Middle%20East%20University%20Emails%2C%20Kroll%20Data%20Compromise%2C%20Email%20Scams%20Update%2C%20Cybersecurity%20News%20%5BAugust%2028%2C%202023%5D "Share on Reddit") [ ](mailto:?subject=Middle%20East%20University%20Emails%2C%20Kroll%20Data%20Compromise%2C%20Email%20Scams%20Update%2C%20Cybersecurity%20News%20%5BAugust%2028%2C%202023%5D&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F "Share via Email") 

![cybersecurity](https://media.mailhop.org/duocircle/images/2023/09/DMARC-report-service-1.jpg) 

Here is a close examination of the latest [email security](/content/email-security-services/what-is-email-security) news covering fraud emails, the Kroll cyberattack, the **newest** **email scam** in the Middle East, and emails impersonating Dallas Mayor.

## Fraudulent Emails Can Easily Reach 84% of Leading Middle East Universities, Says Proofpoint

Cybersecurity leader Proofpoint has disclosed fresh research indicating that 84% of the Middle East’s **top 100 universities** lack fundamental [email security measures](/email-security/reducing-the-risk-of-email-impersonation-attacks-6-email-security-measures-you-need-to-consider/).

The situation [exposes](https://www.zawya.com/en/press-release/research-and-studies/84-of-top-middle-east-universities-are-not-proactively-blocking-fraudulent-emails-from-reaching-students-staff-and-partners-proofpoint-i6r0uciq) students, staff, and partners to the risks of email impersonation attacks. The study, which scrutinized DMARC (Domain-based Message Authentication, Reporting, and Conformance) adoption, revealed that a mere 16% of these universities enforce the **most secure “reject” level** of [DMARC](/resources/what-is-dmarc) protection.

That leaves 84% without proactive safeguards against fraudulent emails. However, 61% of universities have implemented essential DMARC protection, while the remaining 39% have no DMARC safeguard, making them vulnerable to [domain impersonation](https://www.arnnet.com.au/article/696561/acsc-flags-au-domain-impersonation-danger/) by threat actors.

[Cybersecurity](/) expert Emile Abou Saleh of Proofpoint emphasized the urgent need for improved email security practices to counter cyber threats and **safeguard sensitive institutional data**.

## Kroll Cyberattack Exposes Customer Data to Compromise

Kroll, a **third-party entity** managing creditor claims for distressed organizations and advising on cybersecurity, recently encountered a [security breach](https://cybernews.com/news/customer-data-kroll-cyberattack/).

Kroll confirmed that a staff member experienced a complex [SIM-swapping attack](https://www.bleepingcomputer.com/news/security/lapsus-hackers-took-sim-swapping-attacks-to-the-next-level/) through which malicious actors gained unauthorized access to files containing the **personal data of bankruptcy claimants**. The perpetrators targeted the employee’s T-Mobile account, activating the employee’s phone number on their device without Kroll’s authorization.

[![cybercrime statistics](https://media.mailhop.org/duocircle/images/2023/09/DMARC-report-service-1-1.jpg)](https://media.mailhop.org/duocircle/images/2023/09/DMARC-report-service-1-1.jpg)

_This breach affected the accounts of three cryptocurrency organizations, FTX, BlockFi, and Genesis, of which the first two acknowledged the incident._ FTX took precautionary steps, **temporarily freezing** impacted user accounts within the claims portal. The breach did not compromise user passwords or client funds, as neither FTX nor BlockFi systems were directly penetrated.

With a surge in **phishing emails** to individuals linked to crypto organizations’ [bankruptcy cases](https://www.forbes.com/advisor/debt-relief/what-is-bankruptcy/), Kroll has emphasized it never solicits passwords, birth dates, or Social Security Numbers (SSNs) via email, text, or phone. It collaborates with the FBI for a thorough investigation concerning the incident.

## The Latest in Email Scams: From Bogus Cash Offers to Undelivered Packages and Beyond

Leading email scams targeting individuals across the Middle East have been [unveiled](https://www.arabianbusiness.com/abnews/email-scams-free-money-undelivered-parcels-and-more-hoaxes-revealed#:~:text=Email%20scams%3A%20Free%20money%2C%20undelivered%20parcels%20and%20more%20hoaxes%20revealed,-It%20security%20experts&text=the%20Middle%20East-,The%20top%20four%20email%20scams%20targeting%20people%20in%20the%20Middle,IT%20users%20in%20the%20region). Fraudulent messages employ tactics such as **promises of easy money**, notifications about undelivered packages, and fabricated reports of suspicious account activity.

Kaspersky experts have spotlighted these perilous scam patterns in the Middle East-Türkiye-Africa (META) region. These scams employ diverse [social engineering strategies](https://www.strategic-risk-europe.com/home/cyber-expert-shares-top-10-social-engineering-techniques/1443966.article) to lure unsuspecting victims and steal their personal and financial information. Phishing remains the predominant social engineering method, aiming to deceive recipients into accessing **malicious links or attachments**.

The four outlined fraud emails adeptly mimic trustworthy sources to manipulate recipients into interacting with malicious content. They include tricking individuals into disclosing sensitive data through undelivered parcel links, **exploiting fears with “urgent”** [KYC verification requests](https://www.livemint.com/money/personal-finance/sbi-cautions-against-fake-calls-messages-requesting-kyc-verification-11608179723946.html), creating concern with false email login alerts, and preying on greed through promises of free money.

To prevent fraud emails, Kaspersky recommends scrutinizing sender details, detecting typographical errors, utilizing [spam filtering](/email/spam-filtering), employing reliable **antivirus software**, assessing emails before responding and confirming requests with relevant authorities.

[![ spam filtering](https://media.mailhop.org/duocircle/images/2023/09/email-smtp-service-7508.jpg)](https://media.mailhop.org/duocircle/images/2023/09/email-smtp-service-7508.jpg)

## Dallas Mayor Impersonation in Scam Email Triggers Police Advisory

Beware of a fraudulent email posing as Dallas Mayor Eric Johnson, urging recipients to **invest money** through a malicious link. The DPD (Dallas Police Department) has [issued](https://dallaspolice.net/divisions/Pages/Elder-Fraud-Squad.aspx) a warning after numerous reports revealed the scam’s attempt to target seniors.

If you receive such an email, you must **register a complaint** via [dpd@dallascityhall.com](mailto:dpd@dallascityhall.com) or contact 214-671-3543 to counter the threat. If email access is unavailable, visit your local police station to report the incident officially.

If you fall victim to this email scam and experience financial loss, use the DPD Online Reporting System on their official website to **submit a report promptly**. Stay vigilant against such deceptive tactics and focus on email security [best practices](/email-security/email-security-best-practices-and-standards-organizations-must-implement/).

## Topics

NewsSecurityUpdates 

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F) [ ](https://twitter.com/intent/tweet?text=Middle%20East%20University%20Emails%2C%20Kroll%20Data%20Compromise%2C%20Email%20Scams%20Update%2C%20Cybersecurity%20News%20%5BAugust%2028%2C%202023%5D&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-35-of-2023%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2022/01/spf-flattening-7011.jpg)  Cyber Security News Update, Week 1 of 2022 News ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)
- [ ![Cybersecurity](https://media.mailhop.org/duocircle/images/2023/01/spf-validator-6824.jpg)  Cybersecurity News Update, Week 1 of 2023 News ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)
- [ ![cybersecurity](https://media.mailhop.org/duocircle/images/2024/01/phishing-protection.jpg)  EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2024/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 6m  Cyber Security News Update, Week 1 of 2022  Jan 7, 2022 ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)[  News 7m  Cybersecurity News Update, Week 1 of 2023  Jan 1, 2023 ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)[  News 5m  EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\]  Jan 4, 2024 ](/blog/announcements/cyber-security-news-update-week-1-of-2024/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Middle East University Emails, Kroll Data Compromise, Email Scams Update, Cybersecurity News [August 28, 2023]","description":"Here is a close examination of the latest email security news covering fraud emails, the Kroll cyberattack, the newest email scam in the Middle East.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/","datePublished":"2023-09-04T18:47:09.000Z","dateModified":"2025-05-19T12:11:07.000Z","dateCreated":"2023-09-04T18:47:09.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":637,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/09/DMARC-report-service-1.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Middle East University Emails, Kroll Data Compromise, Email Scams Update, Cybersecurity News [August 28, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Middle East University Emails, Kroll Data Compromise, Email Scams Update, Cybersecurity News [August 28, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Middle East University Emails, Kroll Data Compromise, Email Scams Update, Cybersecurity News [August 28, 2023]","description":"Here is a close examination of the latest email security news covering fraud emails, the Kroll cyberattack, the newest email scam in the Middle East.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/","datePublished":"2023-09-04T18:47:09.000Z","dateModified":"2025-05-19T12:11:07.000Z","dateCreated":"2023-09-04T18:47:09.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-35-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":637,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/09/DMARC-report-service-1.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```