From Brackets to Breaches: Securing Your Network Against March Madness Scams

This advisory highlights how March Madness creates a favorable environment for cybercriminals to launch social engineering campaigns—such as spear phishing, drive-by compromises, fake security software, credential dumping, BEC, masquerading, and misuse of external remote services—and provides practical defenses including user training, email and web filtering, MFA, reputable endpoint protection, privileged access management, DNS filtering, secured and monitored remote access, strict BYOD policies, real-time detection tools, and minimizing personal data sharing.