Update: Corrected verbiage with GitHub story, I mentioned it was Capital One that initiated it, that is not the case. Sharing more throughout the day on my Twitter: I would send this stuff out to my users at the bank when they pop-up as it's great for a reminder to be cautious of everything on the internret. Because its a tax document and they specifically stated that a user would have to login to view it, some users may think this is a legitimate request and enter their login credentials. If you open the attached PDF file you will be shown a fake login prompt, created using JavaScript, that asks for your Amazon email address and password. Text In this scam targeting German victims, the scammers pretend to be sending you a tax invoice from Amazon and specifically state that you will need to login to your Amazon Seller's account to view the tax invoice. It what will hopefully be a new module in products like KnowBe4 and PhishMe, this will another great tool for phishing training. If you're using VBScript in your org, you can turn this back on with GPO, but should start looking into upgrading those scripts to Poweshell. Yes, I think it's good to start removing support for this scripting language as anything that can be done in VBScript, can be done even better in Poweshell (which is actively supported). Microsoft will be moving to disable VBScript in Windows 7-8.1 as a move to make those OSes more secure. We received a request from Capital One to remove content containing information about the methods used to steal the data, which we took down promptly after receiving their request. The file posted on GitHub in this incident did not contain any Social Security numbers, bank account information, or any other reportedly stolen personal information. However, Capital One and GitHub spokespeople told news outlets that the data uploaded to GitHub by the hacker didn’t contain any personal information. It also alleges that GitHub is guilty of negligence, negligence per se, and violation of the California civil code.

Text The lawsuit alleges that by allowing the hacker to store information on its servers, GitHub violated the federal Wiretap Act.

Github capital one commander