virtual kidnapping

by Michael Werneburg
on 2017.01.23

You are here:
Risk topics
» Risk topics blog
October, 2017
· ISACA article is live

September, 2017
· published
· the Equifax breach
· Tracking Vulnerability Fixes to Production

August, 2017
· evaluating third party cyber risk

July, 2017
· getting it wrong with R
· de-identifying health information
· that's a lot of tracking!

June, 2017
· gaming Google news
· privacy in this day and age
· another record breach
· writing an industry standard
· ISACA article accepted

May, 2017
· Covey time-management quadrants
· safe harbor de-identification of health data
· an ISACA article

April, 2017
· my guide on managing third party risk
· PMP for five years
· metrics that matter
· 720 reads in 48 hours
· I lost my job

March, 2017
· farewell, SIRA board
· the message and the medium
· an interesting take on consulting

February, 2017
· the ever-expanding sh*tlist
· claiming professional expenses in Canada
· get cyber safe
· the flight of the wealthy

January, 2017
· virtual kidnapping
· financial industry vendor management

November, 2016
· securing your life
· yet another reason to patch

October, 2016
· DNS subdomain discovery
· fintech and information risk


more...

In addition to CEO fraud emails, now there's virtual kidnapping. The "original" version, apparently from Latin America, involved a bogus contact to a parent telling them that their child had been kidnapped, without going to the hassle of actually securing the child. Now it's extended to vacationing executives, with simple techniques deployed to effect a low-risk cash extraction.

current
big list
first