Invasion of the Cryptominers

That's it, we're done! The 2018 malware awareness module is on its way to subscribers, infecting customers with ... our passion for the topic.

There are 28 different types of awareness and training material, in three parallel streams as always:

Stream A: security awareness materials for staff/all employees
1.      Train-the-trainer guide on malware	MS Word document   4 pages	START HERE!  Creative ideas to boost your security awareness program
2.      Awareness seminar on malware	MS PowerPoint presentation   15 slides with speaker notes	Outlines today’s malware threats, plus pragmatic advice on how to reduce the risk
3.      Awareness posters on malware	3 high-resolution JPG images	Eye-catching images
4.      Awareness briefing on malware 2018	8 pages + cover	Written to accompany the seminar, or to circulate on its own merits
5.      Malware hit parade	1 page	Outlines 5 types of malware and 5 notable malware incidents
6.      Malware scam busters	6 x 2 pages each	Double-sided leaflets covering computer viruses, cryptominers, spyware, APTs, bank Trojans & ransomware, with news
7.      Ransomware advisory	1 page	What to do it your computer/device is being held to ransom
8.      Computer virus leaflet	2 pages	Simple double-sided informative leaflet
9.      Case study on malware	2 pages	Draws on a genuine malware incident, reported in the news
10.  Wordsearch puzzle on malware	with solution	The grid hides well over 100 malware terms: how many can you find?
11.  FAQ on malware	1 page	A simple one-side Q&A format
12.  Awareness challenge on malware	1 page	A creative, fun challenge to get people thinking and interacting on malware
13.  Awareness survey on malware	1 page	Measure awareness and gather feedback
14.  Awareness test on malware	1 page	Are your awareness materials and activities getting the key points across?
15.  Hyperlinked information security glossary	316 pages (!)	New terms include false flag, Coinhive, cryptominer, cryptojacking, Hiddad, Kedi and Xafecopy; malware entries are shown in red throughout the glossary
Stream B: security awareness materials for managers
16.  Diagrams for malware	20  MS Visio drawings (!)	Visual representations of various aspects of the malware threat
17.  Management seminar on malware	18 slides with speaker notes	Discusses the evolving malware threat
18.  Board agenda on malware	1 page	Get senior management talking about the strategic aspects of malware
19.  Elevator pitch on malware	1 page, ~80 words	If you had a fleeting chance to discuss malware with management, what would you say?  This document is a prompt
20.  Model policy on malware	5 pages	Generic policy template, needs customization to suit your requirements
21.  Exec briefing on malware	1 page	Looks as the strategic, governance and management aspects
22.  Management briefing on malware	3 pages + cover	Quite succinct, explains cryptomining malware and other topical concerns
23.  Job description for a malware analyst	1 page	Outlines this specialist rôle and the skills/competences typically required
24.  Management briefing on malware metric	5 pages	A discussion paper suggesting several ways to measure malware risks and controls
Stream C: security awareness materials for professionals
25.  Newsletter on malware	4 pages	Uses recent news clippings and topical quotations for an update on malware
26.  Professional seminar on malware	19 slides with speaker notes	A slightly more technical take on malware
27.  Professional briefing on malware	4 pages + cover	A relatively short and sweet update this year, an overview for perspective
28.  Internal Controls Questionnaire on malware	9 pages	Evaluate the organization’s malware-related information risks and controls

I'm particularly pleased with the poster image above, designed to accompany the staff seminar:

Malware The Movie Part XIV:

Invasion of the Cryptominers

While the surface was strangely calm,

far underground the crypt took shape

I had in mind those lurid cult classics such as Invasion of the Bodysnatchers, Friday the Thirteenth or the sinister Hammer horrors with Christopher Lee & co. Our graphics wizz married the concept of a horror movie poster with an image representing digital currency and Bitcoin, bringing it bang up to date. Nice work!  

It's "part XIV" because there are (at least!) 13 other recognized types or families of malware already, conveniently averaging about one per year that we've been churning out the 'malawareness' content. 

I wonder what horrors will feature in the module this time next year? Will it creep you out if I suggest that, whatever it might turn out to be, it is probably already in the wild, right now?

Don't forget to check under the keyboard tonight, and keep a firm grip on the mouse.  Sleep tight.