KnowBe4 Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in human and agent security including social and prompt engineering, ransomware and phishing attacks.

KnowBe4 Threat Lab

KnowBe4 Threat Lab

KnowBe4 Threat Lab is a research and analysis endeavor by seasoned cybersecurity professionals that discovers and investigates the latest phishing techniques and develops strategies to preemptively combat these threats. KnowBe4 Threat Lab specializes in researching and mitigating email threats and phishing attacks, using a combination of expert analysis and crowdsourced intelligence.


Recent Posts

Quishing & Encrypted SVG Payloads in HR Phishing Attacks

In this series, we first explored the psychology that makes HR phishing so effective, then showcased the real-world lures attackers use to trick your employees. Now, we’re going under the ...

HR Phishing Tactics: Why 'Urgent Payroll Update' Emails Are a Trap

Phishing attacks impersonating HR are on the rise. Between January 1 – March 31, 2025, our Threat Lab team observed a 120%surge in these attacks reported via our PhishER product versus ...

Cybersecurity Human Resources Risk: Why HR Is Targeted

We all trust HR - or at least we do when we think they’re emailing us! Data from the KnowBe4 Platform reveals that phishing simulations with internal subject lines dominate the list of ...

EU Survey Platform Exploited in Credential Harvesting Attack

Lead Researchers: James Dyer and Louis Tiley Between May 5 and May 7, 2025, KnowBe4 Threat Lab identified a phishing campaign originating from accounts created on the legitimate service ...

Capital One Customers Targeted in Credential Phishing Campaign

The KnowBe4 Threat Lab has identified an active phishing campaign impersonating Capital One.

AI-Generated Audio Used to Impersonate U.S. Officials

The FBI is warning that threat actors are impersonating senior US officials in phishing attacks designed to compromise users’ accounts.

AppSheet Abused in Meta Impersonation Phishing Campaign

Since March 2025, the KnowBe4 Threat Labs team has observed a surge in phishing attacks that exploit Google’s AppSheet platform to launch a highly targeted, sophisticated campaign ...

Telegram Bots Used to Exfiltrate Data in Phishing Kit Campaign

KnowBe4 ThreatLabs has identified and analyzed a sophisticated cross-platform phishing campaign that utilizes Telegram as its primary exfiltration channel. The campaign uses a combination ...

Google Drive Phishing Spike: Abuse of Legitimate Domains Continues

First QuickBooks, then Microsoft, and now Google—will the hijacking of legitimate third-party platform communications stop escalating in 2025? Our Threat Labs researchers predict the ...

Tax Phishing Scams Spike as Seasonal Urgency Drives Attacks

Cybercriminals are quick to exploit seasonal events — and tax season is no exception. It’s a yearly honeypot for cybercriminals, who take advantage of heightened stress, tight deadlines, ...