Phishing attacks have evolved dramatically in recent years, becoming more sophisticated, targeted, and damaging to businesses of all sizes. What was once a mass-email scam has transformed into an advanced threat that leverages social engineering, personalized messages, and fake websites to steal sensitive information and compromise business operations. Today, phishing is one of the most prevalent cybersecurity risks facing organizations—and it’s growing at an alarming rate.

Phishing scams have surged over the past few years, with the number of attacks increasing by more than 150% annually since 2019. For example, phishing incidents rose from 779,200 in 2019 to a staggering 4,744,699 in 2022. In the fourth quarter of 2024 alone, there were 989,123 attacks—up from 877,536 in Q2 and 932,923 in Q3. These numbers highlight the urgent need for updated and proactive phishing defense protocols in today’s digital landscape.

The Evolving Threat of Phishing Attacks

Phishing attacks have become more intelligent and dangerous. Today’s cybercriminals don’t just send random emails—they carefully craft messages tailored to individual employees, often mimicking trusted sources such as business partners, vendors, or internal leadership. These targeted phishing emails can convince even tech-savvy users to click malicious links, share login credentials, or unknowingly download malware.

Common phishing tactics include:

• Spoofed emails that appear to come from reputable sources

• Fake websites that mimic login pages for cloud services or banks
• Urgent messages prompting immediate action, such as password resets or invoice payments

The result? Businesses face increasing risks, including data breaches, financial losses, and reputational damage. Staying informed and adopting modern defenses has never been more essential.

Recent Updates in Phishing Protocols

To combat the rising threat of phishing, organizations must implement modern defense protocols that go beyond basic spam filters. At Kobargo, we help clients integrate the latest technologies and best practices to stay ahead of cybercriminals.

Key updates in phishing defense include:

• DMARC (Domain-based Message Authentication, Reporting & Conformance): A vital email authentication protocol that prevents domain spoofing and improves email deliverability.
• MFA (Multi-Factor Authentication): Adds an extra layer of security by requiring multiple forms of verification before granting access to sensitive systems.
• AI-Driven Threat Detection: Uses machine learning to identify and block phishing attempts in real-time—even those that bypass traditional filters.
• User Training and Awareness: Ongoing employee education to help staff recognize phishing attempts and respond appropriately.

Why Your Business Needs an Updated Phishing Defense Strategy

Without a comprehensive and updated defense strategy, businesses are left vulnerable to a wide range of threats. These include not only data breaches and financial theft but also reputational harm that can erode customer trust.

A strong phishing defense strategy combines technical safeguards with employee education. Even the most advanced tools can fail if your team isn’t trained to identify suspicious activity. And if your business has already been targeted—or if an employee falls victim to a scam—it’s critical to have a response plan in place to contain the damage and recover quickly.

How Kobargo Helps You Stay Protected

At Kobargo, we specialize in helping businesses build robust, multi-layered defenses against phishing. Our comprehensive cybersecurity services include:

• Advanced Security Solutions: Firewalls, email encryption, and anti-phishing tools designed to detect and block threats before they reach your users.
• Secure Cloud Hosting: Cloud environments with built-in security to protect against phishing-related vulnerabilities. In fact, 94% of businesses reported improved security after moving to the cloud, and 91% stated that cloud solutions helped them meet compliance requirements.
• Employee Training Programs: Tailored sessions that equip your staff with the skills to identify and avoid phishing attempts.
• Ongoing Monitoring: Real-time threat detection and proactive measures to stay one step ahead of cybercriminals.

With enhanced encryption for data both in transit and at rest, our solutions make it significantly harder for hackers—including those using phishing tactics—to access your critical information.

Phishing attacks aren’t slowing down—and neither should your cybersecurity strategy. To protect yourself and your business, you need a proactive, multi-layered approach to protection—one that combines the latest technologies with ongoing user education and expert guidance tailored to your specific needs. Kobargo can help.

Kobargo Is Your Source for Website Security Services

Outsourcing IT services can be a smart choice for businesses that want to focus on their core competencies. It can help them gain access to expertise and resources and improve cost-effectiveness, security, flexibility, scalability, performance, and reliability.

With nearly 50 years of experience working in technology, Kobargo is skilled in all Information technology matters. If you’re interested in outsourcing your IT infrastructure, contact us today to learn how we can help.

The widespread adoption of remote work arrangements has fundamentally reshaped the modern workplace. While offering numerous advantages such as improved work-life balance and reduced overhead costs, this shift has also introduced significant cybersecurity challenges that organizations and employees must address.

The Growth of the Remote Work

Technological advancements have facilitated a significant increase in remote work opportunities. Cloud-based applications, video conferencing tools, and reliable internet connectivity have empowered employees to perform their duties effectively from geographically dispersed locations. This flexibility has fueled the rise of the “digital nomad” – individuals who leverage technology to work remotely while traveling or living in different locations.

Cybersecurity Concerns in a Decentralized Environment

The transition to a decentralized workforce has created new vulnerabilities in the corporate cybersecurity posture. Here are some key areas of concern:

• Unsecured Home Networks: Traditional office environments typically have robust network security measures in place, including firewalls and intrusion detection systems. Many home networks, on the other hand, lack these safeguards, relying on default router settings and potentially weak passwords.  This creates an exploitable entry point for malicious actors seeking to access sensitive company data transmitted over an unencrypted network.
• Phishing Attacks and Social Engineering: Remote workers often rely heavily on email communication, which makes them more susceptible to phishing attacks. These deceptive emails, disguised to appear legitimate (e.g., from a colleague or trusted company), aim to trick recipients into revealing confidential information or clicking on malicious links that can download malware onto their devices.
• Data Security in the Cloud: Cloud storage has become an essential tool for remote teams, enabling seamless collaboration and document sharing. However, improper data handling practices can lead to inadvertent data breaches. Employees might unintentionally share sensitive data with unauthorized individuals or utilize unsecured cloud storage platforms, compromising data confidentiality.
• The BYOD (Bring Your Own Device) Challenge: The BYOD approach allows for employee flexibility by permitting the use of personal devices for work purposes. However, this introduces potential security risks. Personal devices may not have the same level of security software and updates as company-issued equipment, making them vulnerable to malware infections and data breaches.

Mitigating Cybersecurity Risks in the Remote Work Era

To ensure a secure remote work environment, both companies and employees must collaborate in implementing robust cybersecurity measures:

For Organizations:

• Virtual Private Network (VPN) Implementation: A VPN encrypts data traveling between a remote device and the company network, creating a secure tunnel for communication. This significantly reduces the risk of unauthorized access to sensitive information.
• Multi-Factor Authentication (MFA): MFA adds an extra layer of security by requiring a second verification step beyond just a password to access company systems. This additional step significantly hinders unauthorized access attempts.
• Cybersecurity Awareness Training: Regular training programs can equip employees with the knowledge and skills to identify and respond to cyber threats effectively. Training should cover topics such as phishing scams, secure browsing practices, and data security best practices.

For Employees:

• Home Network Security: Securing your home Wi-Fi network is crucial. Use a strong and unique password and enable encryption settings. Avoid using public Wi-Fi for work purposes whenever possible, as these networks are often unsecured.
• Phishing Awareness: Be cautious of suspicious emails and exercise critical thinking before responding. Verify the sender’s identity before clicking on any links or downloading attachments.
• Software Updates: Maintaining up-to-date software on all devices used for work is essential. Regularly installing security patches helps close vulnerabilities exploited by malware and other cyber threats.
• Data Handling Practices: Do not download sensitive work documents onto personal devices without proper authorization. Utilize secure cloud storage platforms designated and approved by your company.

The rise of remote work presents both opportunities and challenges. By acknowledging and addressing the associated cybersecurity risks through proactive measures, organizations and employees can work together to create a secure and productive remote work environment. Prioritizing cybersecurity means we can ensure the continued success and sustainability of this evolving work model.

Kobargo Is Your Source for Website Security Services

From gaining access to expertise and resources to improving cost-effectiveness, security, flexibility, scalability, performance, and reliability, outsourcing IT services can be a smart choice for businesses that want to focus on their core competencies while leaving the management of IT infrastructure to the experts. 

With nearly 50 years of experience working in technology, Kobargo is skilled in all matters of Information technology. If you’re interested in outsourcing your IT infrastructure, contact us today to learn how we can help.

Cyber-criminals Target Remote Workers

Business needs have been changing in front of our eyes with the implementation of remote working conditions to help flatten the curve during a global pandemic, and cyber-criminals are taking notice.
In a recent story, Info-security published in May that cyber-criminals are now impersonating top brands to target remote workers. With new needs and online business demands, Google file sharing and storage websites are being used in 65% of nearly 100,000 form-based attacks according to a recent study.
Cyber-criminals are exploiting these tactics and using Google-branded sites like storage.googleapis.com, docs.google.com, storage.cloud.google.com, and drive.google.com to trick remote workers into sharing login credentials.
And the use of brand impersonation is increasing. Other form-based sites used by attackers included sendgrid.net (10%), mailchimp.com (4%) and formcrafts.com (2%).
All businesses must protect data and information with an IT partner that can help thwart data security tricks from the outside.

How To Protect Your Information with Kobargo

With the substantial rise in phishing attacks with the business workforce now working from home more than ever, businesses need to focus more on IT security.
Security systems and remote working best practices need a partner to strengthen your company’s IT infrastructure. Let Kobargo Technology Partners be your solution. We offer managed IT services, technology consulting, and cloud storage services to keep your data out of the wrong hands. We know how to leverage the very best technology to create customized solutions for your business.
Speak to us today about how to leverage multi-factor identification and email security software to protect your information.

Last week, phishing scams continue to inundate healthcare providers, hackers compromise millions in children’s online game, and thousands of companies send employees home with compromised devices.   

 

United States – Beaumont Health 

Exploit: Phishing scam  
Beaumont Health: Healthcare provider  

Risk to Small Business: 1.537 = Severe

A phishing scam gave hackers access to IT infrastructure containing patients’ protected health information. The breach was identified on March 29, 2020, but data was exfiltrated between May 23, 2019, and June 2, 2019, leaving patient data exposed for nearly a year. This incident has come to light as healthcare providers face cybersecurity threats while battling the COVID-19 crisis, and Beaumont Health will undoubtedly face both regulatory troubles and financial woes on a long road to recovery.

Individual Risk: 1.509 = Severe

Hackers compromise and accessed patients’ personally identifiable information and protected health information, including names, birth dates, Social Security numbers, and medical conditions. In some cases, hackers also accessed bank accounts and driver’s license information. Those impacted by the breach should immediately contact their financial service providers to notify them of the incident. In addition, they will need to closely monitor their accounts for suspicious or unusual activity. They should be especially critical of incoming messages, as hackers often use information from one breach to craft authentic-looking spear phishing campaigns that can compromise additional data.  

Customers Impacted: 112,000

How it Could Affect Your Customers’ Business: Phishing scams are a significant risk to every company’s data. Especially during the COVID-19 pandemic, healthcare companies have seen a precipitous increase in these attacks, as hackers look to capitalize on the urgency and unease of the situation to trick employees into compromising critical data.  

---

United States – Small Business Administration  

Exploit: Unauthorized database access
Small Business Administration: Government agency overseeing small business affairs

Risk to Small Business: 2.177 = Severe

A cybersecurity vulnerability in the portal processing small business owners applying for an emergency loan under the Economic Injury Disaster Loan Program experienced a data breach. The breach, which was detected on March 25th, impacts a vital program for small businesses, and it could harm small business owners who are already grappling with an especially challenging time. Additionally, this oversight has caught the attention of news media, legislatures, and small business owners, weakening its credibility at a critical time. 

Individual Risk: 2.230 = Severe

The breach exposed applicants’ names, addresses, email addresses, dates of birth, citizen status, and insurance information. This data can quickly circulate on the Dark Web, and bad actors will frequently reuse the information in phishing scams and other fraud attempts. The Small Business Administration is offering victims a year of free identity monitoring services, and victims should enroll in this program to receive a notification if their information is misused.  

Customers Impacted: 8,000

How it Could Affect Your Customers’ Business: Now, more than ever, the consequences of a data breach are traumatic for victims. Organizations collecting and storing personal data can support their users during the COVID-19 pandemic by taking extra care to ensure that personal data remains private. It’s a priority that always matters, but that is especially amplified during the pandemic.

---

Canada – Webkinz

Exploit: Unauthorized database access 
Webkinz: Online children’s game  

Risk to Small Business: 2.727 = Moderate

Hackers compromised a database containing customer information and subsequently posted the information on the Dark Web. The breach includes more than 22 million usernames and passwords. Although the company has patched the vulnerability, this information could give bad actors access to the personally identifiable information of minors. In addition to being a veritable PR disaster for a company marketing its products to children, the breach has safety implications as well.  

Individual Risk: 2.603 = Moderate

Those impacted by the breach should immediately update their Webkinz account passwords and their login credentials for any other accounts using the same information. Since this data has already been posted on the Dark Web, users should act quickly to update their credentials, and they need to monitor their accounts for suspicious or unusual activity. 

Customers Impacted: 23,000,000

How it Could Affect Your Customers’ Business: In recent years, the consumer privacy pendulum has swung towards conservative vigilance, and they are increasingly unwilling to do business with companies that can’t protect their data. This is especially true when it comes to companies marketing products to minors. Parents have to feel confident in a company’s data security practices if they are going to support their children’s involvement with your platform

---

Netherlands – COVID19 Alert  

Exploit: Accidental data exposure
COVID19 Alert: Mobile application

Risk to Small Business: 1.315 = Extreme

Developers for the mobile app, COVID19 Alert, which was pitched to the government as a way to track COVID-19 cases, compromised user data in its source code. Before the breach, the app was on the shortlist for government adoption, which could have provided a lucrative contract for developers. Instead, the company has experienced public backlash, and it seems unlikely that they will progress further in the selection process. 

Individual Risk: 2.380 = Severe

The source code, which was released for public scrutiny ahead of the selection process, contained the names, email addresses, and hashed passwords from another project by the developers. This information can quickly make its way to the Dark Web where bad actors can redeploy it in a variety of cybercrimes. Those impacted by the breach should update their account credentials and carefully monitor their accounts and communications for suspicious or unusual activity.  

Customers Impacted: 200

How it Could Affect Your Customers’ Business: Developers cited their rapid development schedule and their desire to quickly make the service available as the reason for the oversight. However, companies looking to bring a new digital product to market must ensure that user data is secure. Otherwise, the project is likely to stall out before it ever even gets started. 

---

Risk Levels:

1 – 1.5 = Extreme Risk
1.51 – 2.49 = Severe Risk
2.5 – 3 = Moderate Risk
*The risk score is calculated using a formula that considers a wide range of factors related to the assessed breach.

---

In Other News:

Hackers Use Stolen Credentials to Attack And Compromise Hospitals with Ransomware      

Since the onset of the COVID-19 pandemic, hospitals, and healthcare facilities have dealt with a deluge of cyberattacks, and ransomware has been especially pernicious. According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), hackers infiltrated many of these organizations using stolen credentials obtained from a known vulnerability in their Pulse Secure VPN servers.  

This threat was first identified in October 2019, with the CISA and the US Federal Bureau of Investigation both issuing subsequent alerts in January and April of 2020. Unfortunately, even after repairing the vulnerability, the agencies have seen examples of cybercriminals using compromised credentials to access company networks.

The incident is a reminder of the importance of acting swiftly to address cybersecurity vulnerabilities but also of maintaining insights into the Dark Web, where stolen login information can quickly circulate and create chaos for your IT infrastructure.  

COVID-19 is creating a more perilous digital environment for companies, making now the right time to double-down on cybersecurity initiatives that can prevent a breach.  

https://www.bleepingcomputer.com/news/security/us-govt-hacker-used-stolen-ad-credentials-to-ransom-hospitals/?&web_view=true    

---

A Note From Kobargo

50,000 Companies Send Employees Home with Infected Devices   

In a rush to enable employees to work remotely, many companies unknowingly sent staffers home with compromised devices. A recent study found that as many as 50,000 companies issued already-compromised devices that were protected at the office by company firewalls and other in-house defensive measures but not outside of it.  

These compromised devices are now operating on lightly-secured home or public Wi-Fi networks in an unmoderated environment, and that brings a deluge of cybersecurity risks. At ID Agent, we’ve compiled several resources to help mitigate risks like this for your remote workforce including a guide for addressing remote work vulnerabilities. 

Adding an extra layer of protection for access to your data and systems is crucial. That’s why we’re excited to be able to provide you with a cutting-edge secure identity and access management solution that was designed with remote workers in mind – at an excellent value.

Passly is perfect for securing company data when workers and administrators are away from the office. Scalable and quick to deploy, Passly provides a single sign-on Launchpad tailored for each user and integrates seamlessly with the applications that your staffers use every day. Multifactor authentication means that even if passwords are compromised, an extra credential is needed to access your data and systems.

We’re here to help as your company adjusts its cybersecurity strategy to meet the new challenges of our changed world and shifting threat landscape. If we can support your efforts during this tumultuous time, please contact us today.

https://www.darkreading.com/endpoint/work-from-home-exposes-already-infected-machines-in-50k-us-organizations-/d/d-id/1337606?&web_view=true

---

Contact Kobargo Technology Partners to schedule a free consultation today!

Last week, compromised email accounts expose customer data, ransomware disrupts remote work, and the FBI releases a new warning about COVID-19 related healthcare cybercrime.   

United States – AST LLC

Exploit: Employee payroll breach 
AST LLC.: Cloud & digital transformation service provider  

Risk to Small Business: 1.871 = Severe

Using a previously compromised email account, hackers accessed employee payroll information. Hackers used their access to set up rules that diverted received messages, making it more difficult for the company to detect the breach. The incident, which occurred on March 9, 2020, has prompted the company to update its cybersecurity standards to include two-factor authentication on company email accounts. Unfortunately, this change is too-little-too-late and is unlikely to assuage the concerns of the company’s enterprise clients. 

Individual Risk: 1.690 = Severe

Hackers accessed employees’ payroll information and 2019 W-2 forms, which included their names, addresses, salary details, Social Security numbers, employer identification numbers, and other work-related information. AST has warned employees that this information will likely be transferred to the Dark Web, where it could be used to create convincing spear phishing emails. The company is offering affected personnel a year of identity theft prevention services, and victims should enroll in this service as an extra defense against additional cybercrimes related to this incident.

Customers Impacted: Unknown

How it Could Affect Your Customers’ Business: Employee email accounts are often compromised, and this can have significant repercussions for both employee and company data. Simple steps, like enabling multi-factor authentication, can help keep these accounts secure while protecting ROI.

United States – San Francisco International Airport

Exploit: Malware attack
San Francisco International Airport: Airport authority

Risk to Small Business: 2.505 = Moderate

A malware attack on two websites related to the San Francisco International Airport, SFOConnect.com and SFOConstruction.com, compromised users’ login credentials. The breach applies specifically to users accessing the sites using Internet Explorer or a Windows-based personal device. In response, the airport has reset all account passwords, and they are encouraging everyone with an account on these platforms to update their login information for other websites that use the same information. 

Individual Risk: 2.775 = Moderate

Hackers obtained peoples’ usernames and passwords. Although the company was quick to reset these credentials, victims should be mindful that this information could be used to access other accounts that rely on the same username and password combination. Therefore, they should carefully monitor their accounts for suspicious or unusual activity.  

Customers Impacted: Unknown

How it Could Affect Your Customers’ Business: Stolen login credentials are often available for sale on the Dark Web, making an awareness of this nefarious marketplace an integral part of any company’s cybersecurity strategy. By having your eyes and ears attuned to this information’s availability, companies can prevent its use before it enables a more devastating data breach. 

---

Canada – Holland America Line, Inc.

Exploit: Accidental data sharing 
Holland America Line, Inc.: Cruise company 

Risk to Small Business: 1.833 = Severe

When communicating with COVID-19 patients from a recently-docked cruise ship, authorities accidentally emailed an attachment that included the personal details to all cruise line passengers impacted by the virus. Compounding the problem, many recipients forwarded the email, expanding the scope of the data exposure. Impacting COVID-19 patients, this data breach is an awful event occurring at a terrible time.

Individual Risk: 1.905 = Severe

The breach includes patients’ personally identifiable information, including their names, addresses, dates of birth, email addresses, phone numbers, and passport numbers. The 247 passengers are also being asked to change their passport numbers. Victims should enroll in a credit and identity monitoring service to ensure the long-term integrity of this critical data.  

Customers Impacted: 247

How it Could Affect Your Customers’ Business: This incident is a reminder that companies need a 360-degree approach to data security that accounts for all types of data loss opportunities. In this way, holistic cybersecurity training can equip employees to rightly prioritize company data and to take appropriate steps to mitigate the risk of a data breach.

---

Risk Levels:

1 – 1.5 = Extreme Risk
1.51 – 2.49 = Severe Risk
2.5 – 3 = Moderate Risk
*The risk score is calculated using a formula that considers a wide range of factors related to the assessed breach.

---

In Other News:

Thousands of Zoom Credentials Available on Dark Web      

As we recently reported in our blog, Zoom and other video conferencing services have soared in popularity, but their convenience can come at a steep cost to cybersecurity. Unfortunately, these services have been subject to a litany of cyber threats. Terms like “Zoom bombing” are now part of our vernacular as Zoom takes the most heat for cybersecurity weaknesses, but other services have faced privacy concerns of their own. 

This reality was underscored this week when cybersecurity researchers discovered more than 2,300 Zoom credentials for sale on the Dark Web. In addition to potentially embarrassing drop-ins, this information could allow hackers to execute a number of cybercrimes, including phishing scams, that could cause real problems for Zoom users.

Ultimately, it’s a reminder that this new remote reality is fraught with cybersecurity concerns that companies need to address. Being aware of potential threats through ongoing Dark Web monitoring is one way to stay ahead of the game during this critical time.

https://securityaffairs.co/wordpress/101475/deep-web/zoom-dark-web.html

---

A Note From Kobargo

COVID-19 Treatment Centers Targeted by Cybercrime   

This week, the Federal Bureau of Investigation (FBI) issued a warning that hackers are increasingly targeting companies pursuing treatments for the novel Coronavirus. As a result, the FBI warned, “Now is the time to protect critical research you’re conducting.”   

Of course, it’s not just researchers experiencing a surge in COVID-19-related cyberattacks. Other healthcare facilities, including hospitals, testing facilities, and specialty care units have experienced a barrage of phishing scams, ransomware attacks, and other cyberattacks. This activity is part of a concerted effort by cybercriminals to take advantage of this scary and destabilizing moment to steal valuable company and customer data. 

Consequently, now is the time for every company to reassess its cyber preparedness in light of the new realities posed by COVID-19. If we can support these efforts in any way, please don’t hesitate to contact our team! 

https://www.reuters.com/article/us-health-coronavirus-cyber/foreign-state-hackers-target-u-s-coronavirus-treatment-research-fbi-official-idUSKBN21Y3GL?&web_view=true

---

Contact Kobargo Technology Partners to schedule a free consultation today!