# data[].attributes.body
This article discusses overall policy changes to our national cyber security strategy. This is a product of a risk management process on currently existing assets and policies and updating them to a less passive/more aggressive strategy.

# data[].attributes.attachment_link.readable_text
Eager to demonstrate a commitment to cybersecurity amidst criticisms over vulnerable election infrastructure, the White House yesterday unveiled its National Cyber Strategy.

The plan is divided four "pillars" of strategy: protecting the homeland by fighting cybercrime and fortifying defenses, promoting American prosperity by adding cyber jobs and defending intellectual property, preserving peace through strength by enforcing global cyber norms, and advancing American influence, particularly by ensuring an open and secure internet.

In conjunction with the strategy's release, White House National Security Adviser John Bolton reportedly affirmed in a press briefing on Thursday that the U.S. will now ratchet up offensive countermeasures against nation-state-backed cyber actors - a departure from the more conservative approach practiced under the previous administration.

One of the key objectives under the plan's homeland protection umbrella is to secure federal networks by further centralizing such efforts under the banner of the Department of Homeland Security, as well as placing an emphasis on supply chain risk management and strengthening federal contractor security.

A second objective is to defend critical infrastructure, with a point of emphasis on securing voting systems and data. "When requested we will provide technical and risk management services, support training and exercising, maintain situational awareness of threats to this sector, and improve the sharing of threat intelligence with... officials to better prepare and protect the election infrastructure," the document reads, adding that the government will also "continue to coordinate the development of cybersecurity standards and guidance to safeguard the electoral process," as well as help with incident response in the event of an attack.

Additionally, homeland protection includes fighting cybercrime, in part by modernizing digital surveillance and computer crime laws to aid authorities, as well as working with other nations to coordinate on investigations and secure the apprehension and extradition of cybercriminals.

In some instances, the document calls for a continuation or improvement of policies and services that were already established, although it is not always spelled out what specific steps must be taken to improve current efforts.

"Most government strategy documents tend to be underwhelming and this one is no different," said Dave Weinstein, VP of threat research at Claroty and a cybersecurity fellow at the think tank NewAmerica, in emailed comments. "This isn't a whole lot of new content or ideas, but rather amplification, clarification, and renewal of previous ones," noting that critical infrastructure was one such area where "substance is a bit lacking."

On the other hand, he applauded the call for modernizing the criminal code, noting that the Computer Fraud and Abuse Act (CFAA) "is in desperate need of a refresh."

Some of the other notable directives found within the document include studying the benefits and risks of emerging technologies such as artificial intelligence and quantum computing; evaluating ways to improve digital identity management while addressing our "over-reliance on Social Security numbers"; and launching an international Cyber Deterrence Initiative led a coalition of like-minded nations seeking to present a united front against nation-state attackers.

"This initiative has enormous potential to be successful if the right nations formally participate and equally contribute to its cause. I would expect to see the Five Eyes join in but it should extend even further, beginning with NATO member-states," added Weinstein.

"Cyberspace is an integral component of all facets of American life, including our economy and defense. Yet, our private and public entities still struggle to secure their systems, and adversaries have increased the frequency and sophistication of their malicious cyber activities," said President Donald Trump in a letter accompanying the strategy document. "America created the Internet and shared it with the world. Now, we must make sure to secure and preserve cyberspace for future generations."

"The new National Cyber Strategy is a great step forward and demonstrates a thoughtful interagency approach to protecting national prosperity and security in our information-enabled world," commented Gregory Touhill, president of Cyxtera Federal Group and former federal CIO under Barack Obama. "It builds upon the lessons learned from previous administrations and presents a solid approach to managing cyber risk."

Calling the policy a "good step forward," Pravin Kothari, CEO of cloud security vendor CipherCloud said that a more offensive approach on cyber "may be the best way to deal with advanced cyber attackers based offshore in far-flung international locations. This way, sophisticated defenders can reach out to stop nation-state attackers and organized crime," especially considering that the "average business or municipality has no ability at any level to deal with these threats directly."

From a defense standpoint, however, Kothari cautioned that "the rubber hits the proverbial road below the policy level, and right now there isn't much to work with. NIST [the National Institute of Standards and Technology] has put some good ideas in place, but the necessary technologies to shut down cyber threats are not being used by over 95% of businesses in the U.S."

# data[].attributes.attachment_link.title
White House touts release of National Cyber Strategy | SC Media

# data[].attributes.attachment_link.description
Eager to demonstrate a commitment to cybersecurity amidst criticisms over vulnerable election infrastructure, the White House yesterday unveiled its National Cyber Strategy. The plan is divided four "pillars" of strategy: protecting the homeland by fighting cybercrime and fortifying defenses, promoting American prosperity by adding cyber jobs and defending intellectual property, preserving peace through strength by enforcing global cyber norms, and advancing American influence, particularly by ensuring an open and secure internet.

# data[].attributes.body
https://www.scmagazine.com/home/industrial-tech-security-association-set-up-ncsc-calls-for-cooperation/

Internal informational tech security is very important to keep information within the company. Procedures such as auditing and biometric authentication are used in hand with relevant access to employees. We can use a more constant structure to keep employees informed and honest. However, security should not just focus on internal systems and protecting from breaches to our technology. In this day and age, threats come in many forms, so we need to expand our reach. Operations security is an often overlooked concept that can be used to protect sensitive information within companies and even in our personal lives. By evaluating the information that needs to be kept secret and analyzing the potential external threats, we can begin to create an idea of the need for operations security. Many competitors will evaluate a company to piece together information that is exposed in order to make a profile they can use to get an advantage on business tactics. In order to overcome this, a company must evaluate its threats, risks, and vulnerabilities and figure out which ones must be prioritized. When this list is made, countermeasures can be made to negate these risks. A countermeasure that stops a threat or vulnerability to precious information has completed the final step of operations security.

Considering how critical operations security is, it comes as no surprise that an association such as Iotsa has been established. As the article notes, adversarial entities are constantly analyzing the latest trends, practices and holes to be found in operational security. Whether it be criminal activity or state-sponsored espionage, gaps in the understanding and implementation of operational security can and will be exploited by those intending to do others harm. Cyberwarfare is a very real issue, and has become enough of an issue that the UK has seen fit to call for sanctions on participating countreies over it (https://www.thenational.ae/world/europe/uk-calls-for-sanctions-on-russia-over-cyber-warfare-1.780817Links to an external site.). Identifying and addressing what data could be targeted,and by whom, followed by analyzing vulnerabilities and countering them, si the only way to protect critical assets.

Operational security is the process of determining if friendly actions can be observed by enemy intelligence and then reduce or eliminate exploitations with countermeasures, for example having employees follow strict policies when a network change has been done while monitoring and logging all changes, always having a group or someone to identify and respond to risks on a timely fashion, restricting admission to network devices and utilizing a dual control system so the same set of employees aren’t in charge of security and network at the same time.

# data[].attributes.body
This article simply talks about advancements that need to be taken by our government to improve our infrastructure's security level.

# data[].attributes.attachment_link.readable_text
The recent news that spies from China, Russia and other countries reportedly had penetrated the U.S. electrical grid, leaving behind software that later could enable them to operate and disrupt the system, came as no surprise to experts in the information security field. Such attacks -- both performed on and sometimes launched by the U.S. - have been common practice for cold-warring nations for some time. In fact, if you read some technologists' updates on their Facebook pages you'll see mentions of such incidents occurring during the Reagan years.

What's interesting about this most recent occurrence is that it proved shocking to some political leaders and may drive electric grid companies to be held more accountable for their inaction in protecting critical systems.
As SANS pointed out in a recent brief, power company execs had reassured members of Congress and the public that they were doing all they could to protect the nation's power systems. But, just as they made these assurances, their systems already had been breached.

The hope by most experts in the industry is that public and, perhaps more importantly, Congressional indignation over this most recent system break-in will prompt Congress to empower even more the North American Electric Reliability Corporation (NERC), the organization that sets and enforces standards for power company owners, operators and users that comprise the bulk power system. Such reinforcement by Congress of NERC's regulatory power would, in theory, allow them to crack down on electric grid companies failing to meet standards that are supposed to help them safeguard the critical components of the national infrastructure.

Michale Assante, the still fairly new VP and CSO of NERC, who has an impressive background in the information security field, in an published April letter to 'industry stakeholders,' shared the results of a recent self-certification compliance survey related to NERC's Reliability Standard that addresses "Critical Cyber Asset Identification." Among many other unsettling results, one of the most pressing revealed that only 29 percent of owners and operators of components running the electric grid identified at least one critical asset (CA), which is defined by NERC as "facilities, systems, and equipment which, if destroyed degraded or otherwise rendered unavailable, would affect the reliability or operability of the Bulk Electric System." Meantime, "fewer than 63 percent of transmission owners identified at least one critical asset."

He goes on to note that cybersecurity issues abound when it comes to protecting the integrity of the power grid - issues that NERC is asking its regulated entities to "take a fresh, comprehensive look at." Specifically, NERC wants these organizations to examine "their risk-based methodology and their resulting list of CAs with a broader perspective on the potential consequences to the entire interconnected system of not only the loss of assets that they own or control, but also the potential misuse of those assets by intelligent threat actors."

Unsurprisingly, according to SANS, power grid execs complained in April that results of the survey shared in Assante's letter never should have been made public - even though compliance audits related to the NERC standard are supposed to begin in these companies at the start of July, Assante noted in the letter.

Electric power officers' ignorance of the threats posed to them and their companies were shown clearly in their criticism of Assante's letter and their voiced collective desire that the results not be made public. But now, their blatant mishandling of critical systems has been uncovered with this most recent penetration by other state-sponsored cybercriminals.

Congress needs to do what's necessary to help NERC call these executives to task and get the power systems they own and operate secured fast and as fully as possible. It has become obvious that these organizations' leaders are grossly negligent in properly safeguarding these critical operations. The bulk power grid absolutely is critical to the nation's day-to-day operations. It should be seen as such by the very people who own and manage them.

Illena Armstrong is editor-in-chief of SC Magazine.

From the May 01, 2009 Issue of SC Media

# data[].attributes.attachment_link.title
Infrastructure security: Power to the people | SC Media

# data[].attributes.attachment_link.description
The recent news that spies from China, Russia and other countries reportedly had penetrated the U.S. electrical grid, leaving behind software that later could enable them to operate and disrupt the system, came as no surprise to experts in the information security field. Such attacks -- both performed on and sometimes launched by the U.S.

# data[].attributes.body
Here is an article about Embracing the social network world keeping important data safe online. Expressing even though social media is here to stay like Email we need to walk before we run with the idea of integrating everything through online social platforms.

# data[].attributes.attachment_link.readable_text
It has been more than a year since social media use surpassed email in terms of worldwide reach. And with social media quickly threatening to do the same in the enterprise, changes brought to IT departments large and small now reach well beyond advances in technology and into the realm of privacy and security concerns.

In a few years, we will look back at the introduction of social networks into the business environment as a revolutionary change, similar to the magnitude of change we saw after the advent of email more than 20 years ago. We may well have a collective "what were we thinking" moment when considering what we would have missed out on had we not embraced the social networking revolution.

Social networks must be adopted within the enterprise because of the potential windfall in productivity and collaboration. However, privacy is an important concern, and collaboration and privacy may well be mutually exclusive.

Like email, social networking is here to stay. The challenge for those charged with leveraging new technologies within the corporate environment is to strike an effective balance between the capabilities the new technology will unlock for the company versus policy concerns, including security and privacy.

To begin to address this, we do have to first encourage the use of social networking within the enterprise. While this may seem to be an obvious first step, there are always those resistant to changes in the ways they are used to doing business. And while the digital natives within the organization may be ready to take off at a full sprint, many of us will probably need to walk before we run. We have to test, experiment and get comfortable before racing headlong into the world of Web 2.0.

Prior to a full migration onto social networks, we must have in place realistic policies that define appropriate use. Of course, we also have to communicate these policies to employees, verifying both that the message is received and understood, then providing training and reinforcement of these policies on a routine basis. Once in place, we must audit for appropriate behavior and reprimand as needed. After all, the use of social networks is not a right, and abuse of this privilege must have consequences to deter such behavior in the future. These guidelines should help to build a human firewall, promoting behaviors that protect information within the company while achieving a measure of operational security that cannot be realized by technology alone.

Reasonable people would not deliberately disclose personally identifiable information or corporate intellectual property. But as we have seen time and again, it only takes one employee to click on a malicious link in order to open the entire company up to the whims of a hacker. In the long-term, we must encourage vendors to develop new technologies that eliminate the human risk as much as possible. But technology will never be a silver bullet. Nothing will ever fully replace responsible human judgment or eliminate the need to educate employees as to where the boundaries are.

Over the past 20 years, we have placed much emphasis on technical security controls - firewalls, IPS, encryption and the like. But with the increased use of social networking technologies, the need for effective operational security (OPSEC) will become at least as important as the digital firewall.

Firewalls and IDS can be easily grasped and understood, while OPSEC is not and is thus often ignored. But with the coming migration of enterprises onto the social net, the need for effective OPSEC, i.e., the human firewall, will become at least as important as the digital firewall.

Rick Tracy is the CTO and CSO of Ashburn, Va.-based Telos Corp.

From the July 01, 2010 Issue of SC Media

# data[].attributes.attachment_link.description
It has been more than a year since social media use surpassed email in terms of worldwide reach. And with social media quickly threatening to do the same in the enterprise, changes brought to IT departments large and small now reach well beyond advances in technology and into the realm of privacy and security concerns.

# data[].attributes.body
A data breach at the Pentagon occurred not involving the Pentagon directly but by a third-party vendor. This breach exposed the PII of at least 30,000 military and civilian personnel. One industry member pointed out the "weak link" in contractors while another commented on the increase PII information on the Dark Web.

# data[].attributes.attachment_link.readable_text
The U.S. Department of Defense suffered a data breach through a third-party vendor resulting in at least 30,000 service members and employees having some of their personal and payment card information compromised.

The Pentagon leadership was informed of the breach on October 4 that the unnamed vendor was compromised exposing the PII and credit card information of the military members and civilian workers, according to the Associated Press. The type of attack has not been released, but on source told The AP that no classified data was involved.

A Pentagon spokesman told The AP that the vendor in question is still under contract, but the DoD has taken steps to cut ties with the company.

Hackers target contractors because they are often thought of as the weakest link in the government supply chain," Jake Olcott, Bitsight's VP of Strategic Partnerships.

Pentagon and federal employees are no strangers to having their personal information exposed. In 2015 21.5 million current and former government employees were involved in the Office of Personnel Management data breach.

"The treasure trove of personally identifiable data on the Dark Web just continues to grow, enabling fraudsters and steal identities or create new, synthetic identities using a combination of real and made-up information, or entirely fictitious information. For example, the personal and credit card information obtained in the DoD breach could be cross-referenced with data obtained from the OPM breach and other widely publicized private sector breaches," said Michael Magrath, OneSpan's director, global regulations and standards.

# data[].attributes.attachment_link.title
Pentagon data breach exposed 30,000 travel records | SC Media

# data[].attributes.attachment_link.description
The U.S. Department of Defense suffered a data breach through a third-party vendor resulting in at least 30,000 service members and employees having some of their personal and payment card information compromised. The Pentagon leadership was informed of the breach on October 4 that the unnamed vendor was compromised exposing the PII and credit card information of the military members and civilian workers, according to the Associated Press.

# data[].attributes.body
This article discuses the "Securing Our Critical Infrastructure" conference. Where four NCSA panelist discuss the worries and future of cyber security. All 4 panelist agreed there is no huge threat to cyber security right now. The four panelist answered question from an audience at their CyberSecurity Summit.

https://www.scmagazine.com/home/security-news/expanding-attack-surfaces-and-difficulties-obtaining-the-right-people-worry-ncsa-panelists/

# data[].attributes.headline
Android spyware BusyGasper has many features, but few known victims ( Group 3)

# data[].attributes.subject
Android spyware BusyGasper has many features, but few known victims ( Group 3)

# data[].attributes.body
This article is about mobile malware implant that is called BusyGasper. This mobile malware targets the Android users. Blog post, Kaspersky Lab researcher Alexey Firsh reports that BusyGasper has existed since May 2016. Malware could reportedly issue around 100 commands, and its capabilities include spying on device sensor, exfiltration data from messaging app such as WhatsApp and Facebook, keylogging, and bypassing the Doze battery saver.
https://www.scmagazine.com/home/security-news/android-spyware-busygasper-has-many-features-but-few-known-victims/

# data[].attributes.body
This article discusses overall policy changes to our national cyber security strategy. This is a product of a risk management process on currently existing assets and policies and updating them to a less passive/more aggressive strategy.

# data[].attributes.attachment_link.readable_text
Eager to demonstrate a commitment to cybersecurity amidst criticisms over vulnerable election infrastructure, the White House yesterday unveiled its National Cyber Strategy.

The plan is divided four "pillars" of strategy: protecting the homeland by fighting cybercrime and fortifying defenses, promoting American prosperity by adding cyber jobs and defending intellectual property, preserving peace through strength by enforcing global cyber norms, and advancing American influence, particularly by ensuring an open and secure internet.

In conjunction with the strategy's release, White House National Security Adviser John Bolton reportedly affirmed in a press briefing on Thursday that the U.S. will now ratchet up offensive countermeasures against nation-state-backed cyber actors - a departure from the more conservative approach practiced under the previous administration.

One of the key objectives under the plan's homeland protection umbrella is to secure federal networks by further centralizing such efforts under the banner of the Department of Homeland Security, as well as placing an emphasis on supply chain risk management and strengthening federal contractor security.

A second objective is to defend critical infrastructure, with a point of emphasis on securing voting systems and data. "When requested we will provide technical and risk management services, support training and exercising, maintain situational awareness of threats to this sector, and improve the sharing of threat intelligence with... officials to better prepare and protect the election infrastructure," the document reads, adding that the government will also "continue to coordinate the development of cybersecurity standards and guidance to safeguard the electoral process," as well as help with incident response in the event of an attack.

Additionally, homeland protection includes fighting cybercrime, in part by modernizing digital surveillance and computer crime laws to aid authorities, as well as working with other nations to coordinate on investigations and secure the apprehension and extradition of cybercriminals.

In some instances, the document calls for a continuation or improvement of policies and services that were already established, although it is not always spelled out what specific steps must be taken to improve current efforts.

"Most government strategy documents tend to be underwhelming and this one is no different," said Dave Weinstein, VP of threat research at Claroty and a cybersecurity fellow at the think tank NewAmerica, in emailed comments. "This isn't a whole lot of new content or ideas, but rather amplification, clarification, and renewal of previous ones," noting that critical infrastructure was one such area where "substance is a bit lacking."

On the other hand, he applauded the call for modernizing the criminal code, noting that the Computer Fraud and Abuse Act (CFAA) "is in desperate need of a refresh."

Some of the other notable directives found within the document include studying the benefits and risks of emerging technologies such as artificial intelligence and quantum computing; evaluating ways to improve digital identity management while addressing our "over-reliance on Social Security numbers"; and launching an international Cyber Deterrence Initiative led a coalition of like-minded nations seeking to present a united front against nation-state attackers.

"This initiative has enormous potential to be successful if the right nations formally participate and equally contribute to its cause. I would expect to see the Five Eyes join in but it should extend even further, beginning with NATO member-states," added Weinstein.

"Cyberspace is an integral component of all facets of American life, including our economy and defense. Yet, our private and public entities still struggle to secure their systems, and adversaries have increased the frequency and sophistication of their malicious cyber activities," said President Donald Trump in a letter accompanying the strategy document. "America created the Internet and shared it with the world. Now, we must make sure to secure and preserve cyberspace for future generations."

"The new National Cyber Strategy is a great step forward and demonstrates a thoughtful interagency approach to protecting national prosperity and security in our information-enabled world," commented Gregory Touhill, president of Cyxtera Federal Group and former federal CIO under Barack Obama. "It builds upon the lessons learned from previous administrations and presents a solid approach to managing cyber risk."

Calling the policy a "good step forward," Pravin Kothari, CEO of cloud security vendor CipherCloud said that a more offensive approach on cyber "may be the best way to deal with advanced cyber attackers based offshore in far-flung international locations. This way, sophisticated defenders can reach out to stop nation-state attackers and organized crime," especially considering that the "average business or municipality has no ability at any level to deal with these threats directly."

From a defense standpoint, however, Kothari cautioned that "the rubber hits the proverbial road below the policy level, and right now there isn't much to work with. NIST [the National Institute of Standards and Technology] has put some good ideas in place, but the necessary technologies to shut down cyber threats are not being used by over 95% of businesses in the U.S."

# data[].attributes.attachment_link.title
White House touts release of National Cyber Strategy | SC Media

# data[].attributes.attachment_link.description
Eager to demonstrate a commitment to cybersecurity amidst criticisms over vulnerable election infrastructure, the White House yesterday unveiled its National Cyber Strategy. The plan is divided four "pillars" of strategy: protecting the homeland by fighting cybercrime and fortifying defenses, promoting American prosperity by adding cyber jobs and defending intellectual property, preserving peace through strength by enforcing global cyber norms, and advancing American influence, particularly by ensuring an open and secure internet.

# data[].attributes.body
A sibling duo embedded malware into prominent figures in the Italian government and other public figures. These people became victim to a spear-phishing tactic that has been going on for years. The emails with the malware contained .zip files that contained EyePyramid, allowing the access of the victim's data. But the attackers were caught due to lack of OPSEC. They communicated and talked about their victims on their phones, used IP addresses associated with their company, and then tried to delete the evidence when they were caught.

# data[].attributes.attachment_link.readable_text
Following the arrest by Italian police of a brother-sister team on charges of hacking into emails of prominent Italian officials, comes an analysis of the malware the suspects are said to have used in their scheme.

The siblings - Giulio Occhionero, 45, and Francesca Maria Occhionero, 47 - used a remote access trojan dubbed EyePyramid in a campaign that penetrated the email accounts of a number of prominent personalities in Italy, including former prime ministers, mayors, officials at the Bank of Italy and politicians in both chambers of the nation's parliament.

The pair spread their malware via spear-phishing emails and, according to an analysis by researchers at Securelist, the level of sophistication was low, though it was efficient enough to grant the attackers access to the targeted accounts. Securelist is a Kaspersky Lab blog.

The researchers said the attack - which was carried out from at least March 2014 until August 2016 - affected around 16,000 victims, all in Italy. However, evidence detected on the C&C servers indicates that the malware might have been in use as far back as 2008, they reported.

The Securelist team credits the Italian police for their investigative work, but comment that technical details on how the malware was disseminated were sparse in the police report.

Their analysis found further details, including a range of emails and attachment filenames. The ploy depended on basic social engineering techniques, they said - namely, getting recipients to open and execute attachments, which arrived as ZIP and 7zip archives, in which the EyePyramid malware was embedded.

The Securelist researchers said that though neither very sophisticated nor carefully obfuscated, the EyePyramid campaign infected a wide range of victims that allowed the suspects to siphon out tens of gigabytes of data.

"In general, the operation had very poor OPSEC [operational security]; the suspects used IP addresses associated with their company in the attacks, discussed the victims using regular phone calls and through WhatsApp and, when caught, attempted to delete all the evidence," they said.

Their conclusion is that the suspects, although not expert in malware techniques, nevertheless achieved remarkable success in absconding with an enormous cache of data, and ran their operation for years before being detected.

The pair's targets were heavily skewed to Italian lawyers and personnel in construction firms, universities, health care and the Vatican. As the perpetrators were well-known in high-finance circles for their work running the London-based financial analysis firm Westlands Securities, the supposition is that they were stealing data for use in investment deals. There is also mention in reports of Giulio Occhionero's association with Freemasons, so there's conjecture he was trying to rise in prominence in the organization.

The siblings have been charged by Italian authorities with a number of felonies, including abusive intrusion in computer systems, abusive eavesdropping, and procurement of information regarding national security. As data was discovered on servers based in the U.S., the FBI was involved in the investigation as well.

# data[].attributes.attachment_link.title
Italian sibling hack team not sophisticated, but efficient, report | SC Media

# data[].attributes.attachment_link.description
Following the arrest by Italian police of a brother-sister team on charges of hacking into emails of prominent Italian officials, comes an analysis of the malware the suspects are said to have used in their scheme.

# data[].attributes.headline
Data from soldiers’ fitness trackers reveal sensitive locations, routines (Group 8)

# data[].attributes.subject
Data from soldiers’ fitness trackers reveal sensitive locations, routines (Group 8)

# data[].attributes.body
A heatmap of two years’ worth of fitness tracker Strava’s global data, released last November but discovered more recently by an Australian student, inadvertently revealed the location of U.S. military facilities in war zones.
https://www.scmagazine.com/home/security-news/privacy-compliance/data-from-soldiers-fitness-trackers-reveal-sensitive-locations-routines/

# data[].attributes.body
This article gives an example of how an attaker can have control of your computer data and use it any way he/she wants. It gives an example about how costumer of booking.com received email with their actual hotel reservation from an attaker who had stolen data from booking.com. The attaker was phishing for personal information.

https://www.scmagazine.com/home/security-news/how-consumers-can-adopt-a-zero-trust-mindset-for-cybersecurity/

Group 1
Marleni Chiappini
Jessie Spires
Tyler Orr