--- title: "Cyber Security News Update, Week 7 of 2020 | DuoCircle" description: "Our first scam of the week “Says it will pay for data breaches.” Really? You don’t say? “A new phishing scam that masquerades as a U.S." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/" --- Quick Answer Week 7, 2020 cyber news: a phishing scam impersonates a US government consumer agency promising payouts to data-breach victims; finance-sector phishing emails push malware via Word documents themed around invoices and bank details; coronavirus-themed phishing impersonates the WHO; Ben-Gurion University researchers exfiltrate data from air-gapped PCs by modulating screen brightness up to 9 meters away; Check Point finds an RCE flaw in Philips Hue smart bulbs; EKANS/Snake ransomware targets ICS processes; Estee Lauder leaves 440 million records exposed; University of Maastricht pays 30 BTC (\~$240K) to Clop ransomware after two staff opened phishing emails. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%207%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%207%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%207%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F "Share via Email") ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/02/spf-record-checker-6427.jpg) Our first [scam of the week](https://www.idtheftcenter.org/new-phishing-scam-says-it-will-pay-for-data-breaches/) “Says it will pay for data breaches.” Really? You don’t say? “A [new phishing scam](https://www.tomsguide.com/news/data-breach-money-scam) that _masquerades as a U.S. government consumer agency is supposedly paying **data breach victims** for the loss of their personally identifiable information_. Instead, once consumers enter their name, birthdate, credit card number and Social Security number, you can probably guess what happens next.” Yes, we can. ## Invoice Phishing Scam The next phishing [scam of the week](https://www.zdnet.com/article/this-latest-phishing-scam-is-spreading-fake-invoices-loaded-with-malware/) is “_spreading fake invoices loaded with malware_.” Don’t pay those invoices, don’t even open them up. “A notorious malware campaign is targeting banks and financial institutions in the US and the UK with cyberattacks that are not only destructive in their own right, but could also be used as the basis for future intrusions by other hackers. The malware is delivered via **phishing emails** that contain a malicious Microsoft Word document. This time the email subject lines are based around invoices, bank details and other financial subjects, common terms to attract the attention of workers in the finance sector.” [![fake news and videos](https://media.mailhop.org/duocircle/images/2020/02/spf-record-5325.jpg)](https://media.mailhop.org/duocircle/images/2020/02/spf-record-5325.jpg) ## Corona Virus related Scam In the “you knew it had to happen” category, our last [scam of the week](https://www.helpnetsecurity.com/2020/02/07/coronavirus-fake-emails/) revolves around coronavirus-related anxiety. “As cases of the virus infection keep popping up across the world, demonstrating just how small (i.e., well-connected) our planet is, so do [fake news and videos](https://www.ibtimes.sg/warning-social-media-infected-fake-news-chinas-coronavirus-video-38498) about the situation on social media, as well as malware, phishing schemes and other scams in people’s inboxes. The latest example of the latter are fake emails purportedly coming from the World Health Organisation (WHO), which is, ironically, engaged in fighting an infodemic of fake coronavirus-themed news online.” You’ve been warned. ## Phishing Phrontier From the “truly scary” department comes [word](https://www.securityweek.com/hackers-can-steal-data-air-gapped-computers-screen-brightness) that hackers can now “_silently exfiltrate sensitive information from air-gapped computers by manipulating the brightness of their screen._” They don’t even need direct access to your computer! Researchers from Israel’s Ben-Gurion University of the Negev and the Shamoon College of Engineering “showed how a piece of malware could collect valuable data from a device (e.g. passwords, encryption keys, files), _modulate it in screen brightness, and transmit it to a nearby camera_. They captured data from up to 9 meters (30 feet).” ## Vulnerability in Philips Bulbs From the “inevitable” department comes [word](https://www.scmagazine.com/home/security-news/iot/philips-wifi-light-bulb-vulnerable-to-attack/) that WiFi light bulbs are vulnerable to attack. “Check Point researchers have found a vulnerability in Philips Hue smart bulbs and bridge enabling them to **remotely infiltrate the device**. Check Point’s Institute for Information Security team was able to take control of a light bulb and _install malware enabling them to take over the device’s control bridge and attack the network_.” Apparently, if you want to be safe you should turn off your computer and sit in the dark. ## Ransomware Attack You expect **ransomware** to hit your computer, and maybe even your mobile device. But industrial control systems? You know, things that enable you to remotely turn things on and off? According to [Help Net Security](https://www.helpnetsecurity.com/2020/02/04/ics-ransomware/), “_New ransomware targets industrial control systems_. Researchers from various security outfits have been analyzing EKANS (aka Snake) since it emerged in mid-December 2019 and found that, among other things, it’s capable of stopping a number of processes (applications) related to ICS (industrial control system) operations.” I wonder who will pay the ransom. ## Body Count _It costs a lot to be beautiful, but nobody ever said it would cost you your privacy_. From [Security Week](https://web.archive.org/web/20221201200718/https://www.securityweek.com/beauty-and-breach-est%C3%A9e-lauder-exposes-440-million-records-unprotected-database), beauty products manufacturer Estée Lauder admitted that a database with **440 million records** was left unprotected. “In total, 440,336,852 records were inadvertently exposed to the Internet, including audit logs containing a large number of email addresses in each document.” If you’re an Estée Lauder customer you should be expecting some spam in your inbox pretty soon. [![ransomware attack](https://media.mailhop.org/duocircle/images/2020/02/spf-record-check-6436.jpg)](https://media.mailhop.org/duocircle/images/2020/02/spf-record-check-6436.jpg) ## University of Maastricht Ransomware Threat Poor University of Maastricht in The Netherlands. It was just sitting there minding its own business when it was hit with a [ransomware attack](https://www.securityweek.com/netherlands-university-pays-240000-after-targeted-ransomware-attack). In the end it decided not to fight it and “paid a **ransom of 30 Bitcoins** (about $240,000 at the time, $294,000 today) for a decryption key to the **CLOP ransomware**.” How did this ransomware come to be? How else? “A series of phishing emails was delivered, and two were successful on different workstations.” In other words, _two different staff took the bait_. ## Phishing Attack on Water Dept in Greenville Not to be outdone, the water department in Greenville, SC was hit with a [phishing attack](https://www.wspa.com/news/greenville-water-cyber-attack-caused-by-employee-clicking-phishing-email/). Question: what caused the phishing attack? Answer: “_Greenville Water officials say that a cyber-attack happened after an employee clicked on a phishing email_.” The more things change the more they stay the same. And that’s the week that was. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F) [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%207%20of%202020&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-7-of-2020%2F) Copy Related Articles - [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg) Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/) - [ ![Spam](https://media.mailhop.org/duocircle/images/2016/05/spf-permerror-3256.jpg) April Spam Filtering Uptime Report News ](/blog/announcements/april-spam-filtering-uptime-report/) - [ ![Spam Filtering](https://media.mailhop.org/duocircle/images/2023/02/spf-record-tester-7226.jpg) Changes to Spam Filtering Technology News ](/blog/announcements/changes-to-spam-filtering-technology/) - [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2020/01/spf-permerror-7312.jpg) Cyber Security News Update, Week 1 of 2020 News ](/blog/announcements/cyber-security-news-update-week-1-of-2020/) ## Related Articles [ News 3m Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[ News 1m April Spam Filtering Uptime Report May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[ News 2m Changes to Spam Filtering Technology Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[ News 4m Cyber Security News Update, Week 1 of 2020 Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 7 of 2020","description":"Our first scam of the week “Says it will pay for data breaches.” Really? You don’t say? “A new phishing scam that masquerades as a U.S.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/","datePublished":"2020-02-14T15:27:24.000Z","dateModified":"2025-05-26T12:56:10.000Z","dateCreated":"2020-02-14T15:27:24.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":779,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/02/spf-record-checker-6427.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 7 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 7 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 7 of 2020","description":"Our first scam of the week “Says it will pay for data breaches.” Really? You don’t say? “A new phishing scam that masquerades as a U.S.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/","datePublished":"2020-02-14T15:27:24.000Z","dateModified":"2025-05-26T12:56:10.000Z","dateCreated":"2020-02-14T15:27:24.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-7-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":779,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/02/spf-record-checker-6427.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```