Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

2021 Security Hints & Tips for Holiday Travels

Dec 9, 2021 4:00:15 PM By Stu Sjouwerman

The holiday season may be closer to "normal" this year, and that means your users will be even more focused on holiday activities - including travel. Cybercriminals will undoubtedly be ...

Real Cyberattack as Phishbait for a Scammer

Dec 9, 2021 8:46:20 AM By Stu Sjouwerman

Scammers are exploiting a real “cyber incident” at a Riverhead New York high school to send out robocalls that claim to be coming from the local police department, RiverheadLOCAL reports.

Credential-Harvesting Phishing Campaign Urges Review of Spam

Dec 8, 2021 10:47:28 AM By Stu Sjouwerman

Researchers at MailGuard have observed a phishing campaign that’s using phony “spam notification” emails that purport to come from Microsoft Office 365. The emails tell recipients that an ...

Victims: After a Data Breach, Changing Passwords and Good Password Hygiene Remain Unimportant

Dec 7, 2021 10:53:12 AM By Stu Sjouwerman

New shocking data shows how unconcerned victim users are after being notified of a data breach involving their credentials, personal information, and even social media accounts.

New TSA PreCheck Scam Seeks to Collect Your Personal and Credit Card Details

Dec 7, 2021 10:53:06 AM By Stu Sjouwerman

Doing one of the best jobs impersonating a website ever seen, this new scam attempts to take those renewing or initially signing up through a believable process that most would fall for.

Half of All Organizations Have Had Employees Approached to Aid in Ransomware Attacks

Dec 7, 2021 10:52:59 AM By Stu Sjouwerman

Partially due to the shift to working remotely, cybercriminals are finding some resemblance of success in getting internal assistance, begging the question of what to do about it.

SideCopy: How an Intelligence Service Uses Phishbait

Dec 7, 2021 10:15:15 AM By Stu Sjouwerman

Researchers at Malwarebytes offer more details on a spear phishing campaign run by a Pakistani threat actor that’s come to be known as “SideCopy.” The campaign was first reported by ...

CyberheistNews Vol 11 #48 [Heads Up] Morgan Stanley Warns Against Recent “Brushing Scam”

Dec 7, 2021 9:27:41 AM By Stu Sjouwerman

New Phishing Campaign has Fake DHL Shipping

Dec 6, 2021 4:14:40 PM By Stu Sjouwerman

Researchers at Avanan have spotted a new phishing campaign that’s impersonating DHL with phony shipping notifications. The emails inform the recipients that they need to update their ...

Your KnowBe4 Fresh Content Updates from November 2021

Dec 3, 2021 7:30:00 AM By Stu Sjouwerman

Check out the 28 new pieces of training content added in November, alongside the always fresh content update highlights.

[Heads Up] First Omicron Phishing Attack Spotted In The UK

Dec 3, 2021 6:57:49 AM By Stu Sjouwerman

Bleepingcomputer had the scoop. Phishing actors have quickly started to exploit the emergence of the Omicron COVID-19 variant and now use it as a lure in their malicious email campaigns. ...

Morgan Stanley Warns Against “Brushing Scam”

Dec 2, 2021 8:58:15 AM By Stu Sjouwerman

Morgan Stanley has outlined several common scams everyone should be on the lookout for during the holiday season. The first involves phony delivery notifications. These scams are common ...

Ingenious New Attack Technique Uses Windows Store to Install Malware

Dec 2, 2021 8:51:44 AM By Stu Sjouwerman

Just when you thought threat actors couldn’t find another way to launch a dropper, a new method has surfaced that takes advantage of native functionality found in Windows 10.

91% of All Baiting Attacks Use Gmail to Collect Intel on Potential Victims

Dec 2, 2021 8:51:29 AM By Stu Sjouwerman

This rudimentary form of phishing contains no malicious links or attachments but serves a very important purpose for cybercriminals and scammers looking to better target victims.

[On-Demand Webinar] When Cybercriminals Hide in Plain Sight: Hacking Platforms You Know and Trust

Dec 1, 2021 1:32:07 PM By Stu Sjouwerman

Today’s hackers are concealing their attacks in places you wouldn’t expect… utilizing tools your users know and trust to deliver their malicious payloads. From hijacked single sign-on ...

Holiday Shopping and Phishing-as-a-Service

Dec 1, 2021 9:22:12 AM By Stu Sjouwerman

Researchers at Egress observed a massive increase in phishing kits in the run-up to Black Friday, particularly those impersonating Amazon.

Bitcoin Scam Videos on Instagram are Part of an Elaborate Account Takeover Scam

Nov 30, 2021 10:55:20 AM By Stu Sjouwerman

This elaborate scam uses social engineering to trick victims into sending the hacker Bitcoin while holding Instagram accounts hostage.

Phishing Attacks Smash All Records in Q3 2021 With the Highest Monthly Number of Attacks Ever

Nov 30, 2021 10:55:12 AM By Stu Sjouwerman

New data shows the business of phishing is moving “up and to the right” in nearly every way measurable, indicating a serious problem as threat actors continue to see growing success.

Mobile Phishing Attacks Surge 161% in the Energy Industry

Nov 30, 2021 10:55:04 AM By Stu Sjouwerman

The need for increased mobile security in the Energy sector has become evident with new data highlighting why these phishing attacks are occurring and effective ways to stop them.

Data Breach Costs Increase by $1 Million When Remote Workers Are Involved

Nov 30, 2021 10:54:57 AM By Stu Sjouwerman

You already knew remote workers increase the risk of cyberattack. New data spells out exactly what the impact of a remote workforce is on data breaches and the cost to remediate.

Security Awareness Training Blog

View Topics