---
title: "Cyber Security News Update, Week 38 of 2020 | DuoCircle"
description: "If you don’t know what a “car wrap” is, it’s a company that pays people to drive their car around “wrapped” in a company advertisement for a fee."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/"
---

Quick Answer

Cybersecurity headlines for the week of September 19, 2020\. Scamicide flagged a 'car wrap' advertising scam in which fraudsters mail counterfeit overpayment checks and ask victims to wire back the difference. Free-concert phishing offered fake tickets to popular tour stops to harvest credit card data. A wave of online-banking fraud used phishing-stolen credentials to drain accounts. A protected health information breach affected a US medical provider after a phishing-driven email compromise. Fairfax County Public Schools in Virginia disclosed a Maze ransomware attack that exposed about 100 GB of data, including some student records.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2038%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2038%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2038%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2020/09/email-smtp-service-5257.jpg) 

If you don’t know what a “car wrap” is, it’s a company that pays people to drive their car around “wrapped” in a company advertisement for a fee. Seems like pretty easy money. _Which is probably why scammers decided to turn it into a scam_.

From [Scamicide](https://scamicide.com/2020/09/13/scam-of-the-day-september-14-2020-car-wrap-scam/), “Scammers exploit legitimate advertising through car wraps by either putting an ad on the Internet or contacting you through a mass email in which they seek people to have their cars used for advertising through this technique called shrink wrapping. _Unsuspecting victims respond to the advertisement and are sent a check for more than the amount that the victim is to be paid for the service_. The victim is instructed to deposit the check in his or her bank account and wire the rest back to the company. This is where the scam comes in. The check that the scammer sends you is a **counterfeit**.” That’s what they call false advertising.

[![Scamicide](https://media.mailhop.org/duocircle/images/2020/09/smtp-email-server-5794.jpg)](https://media.mailhop.org/duocircle/images/2020/09/smtp-email-server-5794.jpg)

## Free Concert Scams

What could be wrong with a free online concert? Nothing, unless it’s a scam, which of course, it is. Since the pandemic, _everything has gone online_, including concerts. So, you knew _it was only a matter of time before the scammers figured out a way to exploit that_.

According to an article on [Scamicide](https://scamicide.com/2020/09/14/scam-of-the-day-september-15-2020-free-online-concert-scam/), it starts with “_scammers posting phony announcements throughout social media of a wide variety of free concerts_. These announcements often include language such as ‘**Free Concert, Sign Up** and Let Your Friends Know Too.’ Of course, there is no concert. The scammers are either seeking personal information such as the cell phone number of someone seeking to sign up for the free concert or using the link to the registration page for the concert to _trick people into unwittingly downloading malware on to their computers such as [ransomware](/phishing-protection/one-more-reason-to-avoid-a-ransomware-attack/) or **keystroke logging malware**_ that can lead to **identity theft**.” What’s the old saying? There’s no such thing as a free concert?

## Phishing Phrontier

You install **antivirus protection** and you hope it protects you, and most of the time it does, but not this time. Because _hackers have a lot of free time to figure out things like how to **download malware** into your computer without triggering antivirus detection_.

According to an [article](https://www.scmagazine.com/home/security-news/new-zeppelin-strand-avoids-av-detection-with-trojan-downloader/) on SC Magazine, “A fresh wave of **Zeppelin ransomware attacks** discovered in late August went _undetected by antivirus defenses as the result of a new trojan downloader_. This campaign shows an evolution of the trojan downloader that relies on **heavy obfuscation** of visual basic code hidden in what seems like random text within the document itself instead of the macro code.” Clever.

## Stolen Money by Hackers

_Ever wonder what happens to the money you lose from a cyberattack?_ So did SWIFT and BAE Systems, so they did some research and published a report of what they found. It’s genius in its complexity.

From an [article](https://www.helpnetsecurity.com/2020/09/09/what-happens-to-funds-once-they-have-been-stolen-in-a-cyberattack/) on Help Net Security, “_cybercriminals often recruit unsuspecting job seekers to serve as **money mules** that extract funds by placing legitimate sounding job advertisements_.” Then they “use insiders at financial institutions to evade or undermine the scrutiny of compliance teams carrying out know-your-customer and due diligence checks on new account openings.” And finally, they “convert stolen funds into assets such as property and jewelry which are likely to hold their value and less likely to attract the attention of law enforcement.” Follow all that? Us either. That’s the point.

## Body Count

Usually, when you hear about a bank’s customers getting hit by a **phishing attack**, the only one who really gets hurt is the bank. Not anymore. _Now a bank in Canada is making the victims of the scam, their own customers, foot part of the bill_.

[![email security services](https://media.mailhop.org/duocircle/images/2020/09/smtp-providers-4792.jpg)](https://media.mailhop.org/duocircle/images/2020/09/smtp-providers-4792.jpg)

From the [CBC](https://www.cbc.ca/news/canada/manitoba/sunova-scam-phishing-deductible-1.5713366) website, “_Sunova Credit Union customers to pay $1K deductible after falling victim to Google ad phishing scam_. Fraudsters stole **$3K from 48 victims** who clicked on fake Sunova website.” On the one hand, it’s not really fair. On the other hand, maybe consumers will start paying more attention to [email security services](/). One thing we know for sure is, this will only encourage the perpetrators.

## PHI Breach

_This week’s personal health information (PHI) breach courtesy of Imperium Health [according](https://www.hipaajournal.com/phi-of-almost-140000-individuals-potentially-compromised-in-imperium-health-phishing-attack/) to the HIPAA Journal._ From the report, “Imperium Health Management, a Louisville, KY-based provider of development services to Accountable Care Organizations (ACOs), is notifying **139,114 individuals** that some of their protected health information was potentially compromised in a recent **phishing attack**.”

_How many compromised emails does it take to breach 100,000+ accounts?_ Turns out **only two**. “The investigation revealed one email account was breached on April 21, 2020 and a second email account was breached on April 24, 2020 due to the employees responding to **phishing emails**. The emails contained links that appeared to be legitimate but directed the employees to a website where their email credentials were harvested.”

## Fairfax County Public Schools Breach

This week’s _education system data breach courtesy of Fairfax County Public Schools_ in Virginia [according](https://www.securityweek.com/northern-virginia-school-system-hacked-data-held-ransom) to Security Week. From the report, “_Virginia’s largest school system has been hacked and the attackers are seeking a **ransom payment** to keep them from disclosing stolen personal information_. The internet hacking group Maze posted some of the data stolen from Fairfax County Public Schools, including student disciplinary records and grades, to prove its hack was successful.” Really sucks if you’re a D student.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2038%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-38-of-2020%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg)  April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/)
- [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg)  Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg)  Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 38 of 2020","description":"If you don’t know what a “car wrap” is, it’s a company that pays people to drive their car around “wrapped” in a company advertisement for a fee.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/","datePublished":"2020-09-19T16:18:47.000Z","dateModified":"2025-05-26T18:30:10.000Z","dateCreated":"2020-09-19T16:18:47.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":900,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/09/email-smtp-service-5257.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 38 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 38 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 38 of 2020","description":"If you don’t know what a “car wrap” is, it’s a company that pays people to drive their car around “wrapped” in a company advertisement for a fee.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/","datePublished":"2020-09-19T16:18:47.000Z","dateModified":"2025-05-26T18:30:10.000Z","dateCreated":"2020-09-19T16:18:47.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-38-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":900,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/09/email-smtp-service-5257.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```