Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

SEO Poisoning + Midterm Elections = Cybercriminals Paradise

Compromised websites focused on tomorrow’s midterm elections serve as the hunting ground for cybercriminals looking to take advantage of unsuspecting visitors.
Continue Reading

Most Americans Can be Fooled by Fake Election Emails

The average American cannot reliably distinguish between fake and legitimate election campaign emails, according to a study by Valimail. In the weeks leading up to the US midterm ...
Continue Reading

Scam Of The Week: Fortnite And League of Legends Phishing Attacks

This is an excellent opportunity to sit down with your young'uns and explain the risks of online scams.
Continue Reading

Money Mules: How A Data Breach Turns Into Cash

Cybercriminals don’t want to be caught, so after a data breach, they use unsuspecting people as “mules” to launder money using a sophisticated shipping scam.
Continue Reading

New Stuxnet Variant Allegedly Struck Iran

Our friends at Malwarebytes reported that a malware strain similar in nature to Stuxnet—but more aggressive and sophisticated—allegedly hit the infrastructure and strategic networks in ...
Continue Reading

[On-Demand Webinar] The Pesky Password Problem: Battle of the Red and Blue Team featuring Kevin Mitnick

What really makes a “strong” password? And why are your end-users tortured with them in the first place? How do hackers crack your passwords with ease? And what can/should you do about ...
Continue Reading

Successful Pretexting Attacks Have Nearly Tripled since 2017

Pretexting attacks are a growing threat to organizations, warn Chris Tappin and Simon Ezard from the Verizon Threat Research Advisory Centre. Verizon’s 2018 Digital Breach Investigation ...
Continue Reading

Phishing Scam Is Targeting League of Legends Players

A phishing scam is using fake login pages to target League of Legends players, according to Avast Blog. At the moment, the attacks are taking place primarily in western Europe, mainly ...
Continue Reading

Got A Chinese Vishing Scam Call in Mandarin

Howard, KnowBe4's HackBusters Discussion Forum Moderator reported on this very interesting phone call he got:
Continue Reading

Has Microsoft Office 365 Beat Phishing?

By Roger A. Grimes, KnowBe4's Data-Driven Defense Evangelist. Microsoft recently announced a big update to their Microsoft Office 365 (O365) anti-phishing technical capabilities. ...
Continue Reading

Scammers Target 21 Social Media Users Every Minute

According to a new survey, social media sharing – and oversharing – provides cybercriminals with important personal details to commit identity theft, fraud, and more.
Continue Reading

KnowBe4 Fresh Content Update & New Features October 2018

Check out the content and feature updates in the KnowBe4 platform for the month of October!
Continue Reading

Scam Of The Week: Cryptocurrency On Twitter

The recent rash of cryptocurrency scams on Twitter show organizations that social media is there to share posts and can’t protect platform users.
Continue Reading

KnowBe4 Halloween 2018

Just a shot of almost 600 people in costume !!!
Continue Reading

Elon Musk Draws Attention to Cryptocurrency Scams on Twitter

The Tesla founder’s recent tweet about cryptocurrency got him temporarily locked out of his Twitter account, demonstrating the seriousness of the scam.
Continue Reading

Sandboxed Defender: Game-Changing Antivirus

With Microsoft’s latest release of Windows Defender running in a virtual sandbox (the first of its kind), it may be time to focus your energies – and budget – on other parts of your ...
Continue Reading

Security Rule-Breaking from Ignorance, Convenience, Curiosity

Ignorance of security policies and security threats is one of the primary reasons why employees break cybersecurity rules, says Ericka Chickowski at Dark Reading. A study conducted by ...
Continue Reading

School Daze: Clever Phishing Emails Target Educational Organizations

By Eric Howes, KnowBe4 Principal Lab Researcher. It will surprise few people to learn that during our daily review of suspicious emails forwarded to us by users of the Phish Alert Button ...
Continue Reading

Replica Phishing Sites Prey on User Trust

Attacks leveraging look-alike federated logon pages are more dangerous than malware-laden attachments in email.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews