Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

CEO Fraud Causes A Whopping 37.5 Million Dollar Loss At An EU Toyota Subsidiary

A European subsidiary of the Toyota Boshoku Corporation, a Japanese manufacturer of car parts and part of the Toyota Group, lost estimated at 4 billion yen, 34 million euros (37.5m ...
Continue Reading

Social Media and Their Exploitation in Social Engineering

Phishing is most commonly associated with email, but social media are quickly becoming a major hunting grounds for scammers, according to Elliot Volkman from PhishLabs. Social media ...
Continue Reading

U.K. Charity Workers Most At Risk From Phishing

Tessian report finds a large amount of U.K. charity workers aren't getting proper security awareness training. Michael Moore at ITProPortal wrote: "UK charities are leaving themselves ...
Continue Reading

KnowBe4 Fresh Content and Feature Update - August 2019

Check out the content and feature updates in the KnowBe4 platform for the month of August!
Continue Reading

Join Us for a Live Demo on Simulated Phishing and Awareness Training

See Ridiculously Easy Security Awareness Training and Phishing in Action!
Continue Reading

Thousands Of Servers Infected With New Lilocked (Lilu) Ransomware

Thousands of web servers have been infected and had their files encrypted by a new strain of ransomware named Lilocked (or Lilu).
Continue Reading

Advanced Android SMS Phishing

Attackers can launch SMS phishing attacks to remotely change settings on a victim’s Android device, researchers at Check Point have found. These attacks take advantage of weak ...
Continue Reading

Why Do People Keep Falling For Facebook Hoaxes?

Falling for social media hoaxes indicates a deeper underlying need for online awareness, according to Ben Yelin from the University of Maryland Center for Health and Homeland Security.
Continue Reading

Connecting Security Awareness Training Data to your Security Operations

Highlighting the value of connecting user security awareness trainings to the critical resources those users can access
Continue Reading

Email Account Takeover and Lateral Phishing Attacks Increase Risk to Enterprises

The latest method of attack uses sender familiarity to lower victim defenses and increase the potential for scams, attacks, or fraud to succeed.
Continue Reading

New Ursnif Malware Attacks Use Phishing, Social Engineering and Microsoft Word

The decade-old malware traditionally used to capture banking details has been given new life and spotted in the wild, being distributed via malicious Word documents.
Continue Reading

Phishing for Cloud Providers A New Supply Chain Threat

Attackers are going after cloud-based customer relationship management (CRM) providers in order to launch unusually convincing phishing campaigns, KrebsOnSecurity reports.
Continue Reading

Watch Out For Hurricane Dorian Phishing Scams. We have Templates Ready For You.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns users to remain vigilant for malicious cyber activity targeting Hurricane Dorian disaster victims and potential ...
Continue Reading

Multistage Phishing Attacks Target Financial Information

Trend Micro researchers have published details about a sophisticated phishing campaign they’ve named “Heatstroke.” The attackers behind Heatstroke go after victims’ private email ...
Continue Reading

CEO Fraud Overtakes Ransomware And Data Breaches In EMEA Cyber-insurance Claims

CEO Fraud—also known as Business Email Compromise—related cyber-insurance claims accounted for nearly a quarter of all claims in the EMEA region, AIG said.
Continue Reading

Double the Phish, Double the Phun

By Eric Howes, KnowBe4 Principal Lab Researcher. Over the past week we spotted something new and interesting in the malicious emails being reported to us by customers using the Phish ...
Continue Reading

Alert Your Users About Calendar Scams And What To Do About Them

We’ve noted this particular scam before, but it’s continued to make a pest of itself, and so we bring it to your attention again. Scammers are abusing Google Calendar invites to send out ...
Continue Reading

Phishing Scheme Gains Entry To Oregon Judicial Department Emails

Aubrey Wieber at the DemocratHerald reported: "A phishing scheme succeeded in breaking into the email accounts of five Oregon Judicial Department employees, exposing personal information ...
Continue Reading

AI Used For Social Engineering. Fraudsters Mimic CEO’s Voice in Unusual Cybercrime Case | WSJ

Catherine Stupp at the Wall Street Journal reported on something we have predicted would happen in this blog. The article started out with:
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews