Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.


Recent Posts

Phishing Attack-Turned-Wire Fraud Case Sees a Win for the Policyholder

In an unusual turn of events, a recent court decision sided with the policyholder, despite specific policy language that probably should have favored the insurer.
Continue Reading

QakBot Banking Trojan Evolves and Now Takes Over Email Conversations to Spread Malware

As if stealing all your credentials, cookies, and email wasn’t bad enough, this new version of QakBot inserts itself into your emails, impersonating you to gain access to more victims.
Continue Reading

Phishing Scam with Fraudulent Invoice Costs City of Fresno Over $600,000

This simple invoice scam appears to be a part of a much broader campaign targeting municipalities, posing as existing subcontractors.
Continue Reading

Exploiting Trust in reCAPTCHA

Researchers at Avanan warn that attackers are using reCAPTCHAs on their phishing sites to avoid detection by security scanners.
Continue Reading

Published Zelenskyy Deepfake Video Demonstrates the Modern War is Online

The video uploaded to a hacked Ukrainian news website shows how far the technology has come, how it can be used in social engineering, as well as how the tech still needs to improve.
Continue Reading

SMBs Are 350% More Likely to Experience Social Engineering Attacks Via Phishing

New data shows phishing, social engineering, and impersonation dominate as cybercriminals are becoming more frequent and successful with their attacks.
Continue Reading

CyberheistNews Vol 12 #12 [New White House Alert] Train Your Users Against Threat of Russian Cyberattacks

[New White House Alert] Train Your Users Against Threat of Russian Cyberattacks Email not displaying? | View Knowbe4 Blog CyberheistNews Vol 12 #12 | Mar. 22nd., 2022 [New White House ...
Continue Reading

[BREAKING] White House warns Russia is prepping possible cyberattacks against US

With the recent cyber-attacks between Russia and Ukraine and the current intelligence coming from the US Government, organizations want to shore up their defenses to reduce the risk of a ...
Continue Reading

Chameleons Phish, Too

One of the challenges cyber criminals face is that their scams often have a relatively short shelf-life. Once they’ve been used, the gaff is quickly blown, and the scammers hope to ...
Continue Reading

[Heads Up] New Evil Ransomware Feature: Disk Wiper if You Don't Pay

There is a new ransomware-as-a-service (RaaS) strain called LokiLocker, researchers at Blackberry warn. The malware uses rare code obfuscation and includes a file wiper component that ...
Continue Reading

KnowBe4 Named a Leader in The Forrester Wave for Security Awareness and Training Solutions

We’re thrilled to announce that KnowBe4 has been named a Leader in The Forrester WaveTM : Security Awareness and Training Solutions, Q1 2022 report based on our current offering, strategy ...
Continue Reading

Ransomware-Related Data Leaks Increase 82% as the Number of Cybercriminal Groups Nearly Triples

New insight into the state of the attacks and threats paints a picture where the cybercriminals are growing in number, sophistication and successes, while victims just sit back seemingly ...
Continue Reading

Backups Become the Focus as Three-Fourths of Organizations Experienced Ransomware Attacks

New data puts the spotlight on how most organizations unable to completely recover their data after a ransomware attack, making the case for better data protection for improved incident ...
Continue Reading

New Phishing Method Uses VNC to Bypass MFA Measures and Gives Cybercriminals Needed Access

Despite cloud vendors like Google detecting reverse proxies or man-in-the-middle (MiTM) attacks and halting logons to thwart malicious actions, a new method easily gains access.
Continue Reading

[Eye Opener] Ukraine Is Now Being Hit With 4 Different Strains Of Wiper Malware

Newly discovered data-destroying malware was found this week in attacks targeting Ukrainian organizations and deleting data across systems on compromised networks. "This new malware ...
Continue Reading

We Are In The First Open Source Intelligence War

I am a member of OODA loop. They are a great team that keeps me up to date about InfoSec issues. Their site always has interesting articles and this one certainly got my attention. The ...
Continue Reading

CyberheistNews Vol 12 #11 [Heads Up] FBI: Ransomware Gang Breached 52 U.S. Critical Infrastructure Orgs

[Heads Up] FBI: Ransomware Gang Breached 52 US Critical Infrastructure Orgs Email not displaying? | View Knowbe4 Blog CyberheistNews Vol 12 #11 | Mar. 15th., 2022 [Heads Up] FBI: ...
Continue Reading

Shipping Fraud Rises Nearly 800% in 2021

Shipping fraud had a global increase of nearly 800% over the course of 2021, according to TransUnion’s 2022 Global Digital Fraud Trends Report.
Continue Reading

[On-Demand Webinar] Cybercrime-as-a-Service: Its Evolution and What You Can Do to Fight Back

The cybercrime market has skyrocketed in a frightening way. With threats such as ransomware to Business Email Compromise (BEC), the stakes are higher than ever for organizations across ...
Continue Reading

Social Engineering through Contact Form

Email is the familiar form of phishing, but there’s an ongoing criminal campaign that follows a different, arguably subtler avenue of approach: the corporate contact form. Abnormal ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews