Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Wartime Suffering as Phishbait

Feb 28, 2022 10:45:46 AM By Stu Sjouwerman

It’s easy to forget, when a hybrid war like the one currently raging in Ukraine is occupying so much attention, that ordinary criminal lowlifes continue to seek victims, and the war only ...

[EYES OPEN] The Kremlin Propaganda Machine Now Works Overtime. INFOGRAPHIC

Feb 27, 2022 8:26:32 AM By Stu Sjouwerman

With an ongoing land war in Ukraine, everyone needs to be alert for the Kremlin's parallel disinformation campaigns. Many people simply are not aware of the massive amount of false data ...

[Heads Up] The Ukraine War Started A New Wiper Malware Spillover Risk

Feb 25, 2022 7:12:46 AM By Stu Sjouwerman

The war in Ukraine increases the risk of wiper malware to spill over. I'm sure you remember NotPetya, which caused billions of dollars of downtime damage. The WSJ reports that Symantec ...

When the Phishers Want a Reply, not a Click

Feb 23, 2022 9:46:21 AM By Stu Sjouwerman

A sextortion phishing campaign is targeting French speakers accusing them of viewing child abuse content, according to Paul Ducklin at Naked Security. The emails purport to come from the ...

CyberheistNews Vol 12 #08 [Eye Opener] Here Are the 4 Traits of Most Scams

Feb 22, 2022 9:52:39 AM By Stu Sjouwerman

CyberheistNews Vol 12 #08 | Feb. 22nd., 2022 [Eye Opener] Here Are the 4 Traits of Most Scams Written by Roger Grimes There are a lot of scams in the world, and they seem to be ...

New Phishing Campaign Angles for Monzo Banking Customers

Feb 22, 2022 9:02:06 AM By Stu Sjouwerman

A phishing campaign is targeting users of the UK-based digital banking company Monzo, BleepingComputer reports. Security researcher William Thomas came across an SMS phishing (smishing) ...

20 Year-Old “Right-to-Left Override” Functionality Used in Attacks to Trick Microsoft 365 Users Out of Credentials

Feb 22, 2022 9:01:58 AM By Stu Sjouwerman

Used to disguise malicious file extensions, this legacy functionality is being repurposed in attacks to obfuscate attachment types and steal credentials in an impressive way.

New QBot Attack Only Takes 30 Minutes to Elevate Privileges and Steal Data

Feb 22, 2022 9:01:50 AM By Stu Sjouwerman

This banking trojan-turned-information-stealer has been around for nearly 15 years. But its latest iteration – seen even in the past few weeks – has stepped up in its’ ability to act ...

Phishing Campaign Targets NFT Speculators

Feb 21, 2022 2:50:06 PM By Stu Sjouwerman

Scams follow fashion because money follows fashion. So it’s no surprise that non-fungible tokens (NFTs), which have become a hot speculative property, have drawn scam artists for phishing ...

[Heads Up] There Is A Whole New Type of Blockchain Scam Called "Ice phishing"

Feb 20, 2022 2:56:23 PM By Stu Sjouwerman

In a post Wednesday last week, Microsoft issued a warning that they are seeing a brand new type of blockchain-centric attack aimed at web3 -- a term used to describe the decentralized ...

Conti Ransomware Attacks Reap in $180 Million in 2021 as Average Ransomware Payments Rise by 34%

Feb 17, 2022 10:08:55 AM By Stu Sjouwerman

New analysis of ransomware attacks shows growth in the number of active strains, ransoms collected, and use of third-party services all adding up to a more organized and profitable ...

Coinbase’s QR Code Superbowl Ad Only Helps Normalize QR-Based Scams

Feb 17, 2022 10:08:51 AM By Stu Sjouwerman

Use of QR codes is becoming a mainstream part of advertising, but also is getting the attention of scammers intent on redirecting you to a malicious site they control.

Scammers Use a Mix of Stolen Credentials, Inbox Rules, and a Rogue Outlook Client Install to Phish Internal and External Victims

Feb 17, 2022 10:08:48 AM By Stu Sjouwerman

Organizations that are not using Microsoft’s multi-factor authentication are finding themselves victims of credential attacks that involve threat actors installing Outlook on a controlled ...

Security Awareness Training Blog

View Topics

Stu Sjouwerman

Books

Recent Posts

Wartime Suffering as Phishbait

[EYES OPEN] The Kremlin Propaganda Machine Now Works Overtime. INFOGRAPHIC

[Heads Up] The Ukraine War Started A New Wiper Malware Spillover Risk

When the Phishers Want a Reply, not a Click

CyberheistNews Vol 12 #08 [Eye Opener] Here Are the 4 Traits of Most Scams

New Phishing Campaign Angles for Monzo Banking Customers

20 Year-Old “Right-to-Left Override” Functionality Used in Attacks to Trick Microsoft 365 Users Out of Credentials

New QBot Attack Only Takes 30 Minutes to Elevate Privileges and Steal Data

Phishing Campaign Targets NFT Speculators

[Heads Up] There Is A Whole New Type of Blockchain Scam Called "Ice phishing"

Conti Ransomware Attacks Reap in $180 Million in 2021 as Average Ransomware Payments Rise by 34%

Coinbase’s QR Code Superbowl Ad Only Helps Normalize QR-Based Scams

Scammers Use a Mix of Stolen Credentials, Inbox Rules, and a Rogue Outlook Client Install to Phish Internal and External Victims

Phishing Attacks on Social Media Doubled Over 2021

CyberheistNews Vol 12 #07 [Heads Up] FBI Warns Against New Criminal QR Code Scams

[On-Demand Webinar] Incredible Email Hacks You'd Never Expect and How You Can Stop Them

Meta Files Lawsuit Over Phishing Attacks

FBI: Scammers Exploit Job Posting Sites with Fake Jobs to Steal Money and Personal Information

New Cyberattack Campaign Delivers Multiple RATs via Trusted Cloud Services

Brand Impersonation and the Healthcare Sector

Search Our Blog

Subscribe To Our Blog

Posts By Topic

Get the latest about social engineering

Subscribe to CyberheistNews

Get the latest about social engineering

Subscribe to CyberheistNews