---
title: "Cyber Security News Update, Week 37 of 2020 | DuoCircle"
description: "Beware of photo sharing messages from Google. It’s a scam according to the Better Business Bureau."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/"
---

Quick Answer

Cybersecurity headlines for the week of September 13, 2020\. The Better Business Bureau warned of a Google Photos phishing scam in which a 'shared album' email or text using a goo.gl link points to a fake Google login page. The Brookline, MA Police Department flagged scammers impersonating officers to demand bond payments via prepaid cards. An Orange County, CA scam used spoofed government numbers to threaten recipients with arrest unless fines were paid. A Bitcoin wallet hack reportedly drained around $1 million by exploiting a wallet provider's bug. Phishing roundup items cover other notable lures of the week.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2037%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2037%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2037%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2020/09/dmarc-report-5378.jpg) 

_Beware of photo sharing messages from Google_. It’s a scam according to the [Better Business Bureau](https://www.bbb.org/article/news-releases/23010-bbb-scam-alert-photo-sharing-message-is-phishing-for-your-google-password).

From the BBB, “You get an email or text message that appears to come from Google Photo. Someone is sharing an album of photos with you. To view the photos, you just need to click the link. The message looks so real! _It may use a convincing URL, which has been created by Google’s goo.gl URL shortened_ to appear to be an official Google domain name. The catch? _There is no photo album. It’s a phishing con_.”

## Brookline Police Department Scam

_Every now and then the people set to protect us, become part of the scam_. Such was the case recently with the Brookline, MA police department. They were the unwitting participants in an imposter scam.

[![Scamicide](https://media.mailhop.org/duocircle/images/2020/09/what-is-a-dmarc-2742.jpg)](https://media.mailhop.org/duocircle/images/2020/09/what-is-a-dmarc-2742.jpg)

According to [Scamicide](https://scamicide.com/2020/09/05/scam-of-the-day-september-6-2020-police-impostor-scam-thwarted/), “Recently the Brookline, Massachusetts Police Department reported on its Instagram account about a _woman receiving a telephone call that her Caller ID indicated was from the Brookline Police Department_. The person calling identified himself as ‘officer Turner’ and _told her that her bank account had been hacked and asked for her bank account information_. Fortunately, the savvy Brookline citizen recognized that this did not seem legitimate with the help of [email security software](/), hung up the call and then called the Brookline Police Department who informed her that the **call was a scam**, that there was no Officer Turner and that no police officer would ask her for personal financial information over the phone.” The old Officer Turner scam.

## Phishing Phrontier

In the “good to know department,” apparently there is a **security flaw** that allows bypassing PIN verification on Visa contactless payments.

From [We Live Security](https://www.welivesecurity.com/2020/08/31/security-flaw-allows-bypassing-pin-verification-visa-contactless-cards/), “A team of researchers from the Swiss Federal Institute of Technology in Zurich (ETH Zurich) has _found a security vulnerability in Visa’s EMV contactless protocol that could allow attackers to perform PIN bypass attacks_ and commit credit card fraud. The academics demonstrated **how the attack** can be carried out using two Android phones, a contactless credit card, and a proof-of-concept Android application that they developed specifically for this purpose.”

## Orange County Scam

_How can a simple package be used to phish you_? When it’s a fake simple package, this according to the Orange County (CA) Sheriff’s department.

[![install malware](https://media.mailhop.org/duocircle/images/2020/09/check-dmarc-record-3734.jpg)](https://media.mailhop.org/duocircle/images/2020/09/check-dmarc-record-3734.jpg)

From [KTLA News](https://ktla.com/news/local-news/o-c-sheriffs-department-warns-of-phishing-scam-that-uses-fake-packages-to-steal-identities-drain-bank-accounts/), “Cyber criminals are dangling the promise of a pending package in a **phishing scam** aimed at obtaining your personal information, the Orange County Sheriff’s Department warned Sunday. Here’s how the scam works: _An SMS message is sent to cellphones with a malicious link_, which prompts the user to submit personal data, the Sheriff’s Department said in a Facebook post. The information being sought can then allow cyber criminals to steal a person’s identity, empty that individual’s bank account or [install malware](/email-security/your-business-runs-on-email-dont-let-it-fall-to-malware/) on the cellphone.”

## Body Count

_738GB of data is a lot of data_. And you don’t have to tell that to Service NSW of Australia because they’re the organization that lost the data.

According to [IT News](https://www.itnews.com.au/news/service-nsw-reveals-hackers-stole-738gb-of-data-in-email-compromise-552932), “_Service NSW has revealed that hackers behind an email compromise attack against 47 staff members earlier this year stole 738GB of data_, encompassing **3.8 million documents**. the one-stop-shop for NSW government services confirmed the data loss, which included the personal information of 186,000 customers.” Ouch.

## Bitcoin Wallet Hack

Now you probably don’t have any Bitcoin, most people don’t. And that’s a good thing because _the wallets used to store Bitcoin are constant under attack_. This week’s victim **lost $16 million**.

According to [Inside Bitcoins](https://insidebitcoins.com/news/electrum-user-loses-16-million-to-phishing-scam), “The user, who goes by the name ‘1400BitcoinStolen’, explained that he had downloaded the Electrum crypto wallet and got a pop-up message to update the app. The **security update** was a requirement before making any fund transfers, so he installed it and tried sending all the funds in his account. Sadly, _the funds were maliciously diverted and are now in the possession of a hacker._” Double ouch.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2037%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-37-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 37 of 2020","description":"Beware of photo sharing messages from Google. It’s a scam according to the Better Business Bureau.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/","datePublished":"2020-09-13T18:45:23.000Z","dateModified":"2025-05-26T18:36:54.000Z","dateCreated":"2020-09-13T18:45:23.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":656,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/09/dmarc-report-5378.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 37 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 37 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 37 of 2020","description":"Beware of photo sharing messages from Google. It’s a scam according to the Better Business Bureau.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/","datePublished":"2020-09-13T18:45:23.000Z","dateModified":"2025-05-26T18:36:54.000Z","dateCreated":"2020-09-13T18:45:23.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-37-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":656,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/09/dmarc-report-5378.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```