Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Advertising Intelligence—ADINT—Can Be Misused For Social Engineering

You are probably aware of the terms SIGINT (signals intelligence, like radio interception) and HUMINT (human intelligence, like espionage). There is a new term coined by the University of ...
Continue Reading

The First Recorded Statement Of Security Awareness Training?

I was just sent a link to video of Kevin Mitnick's testimony before a congressional committee of March 2, 2000 where he explained how he was able to hack into dozens of large ...
Continue Reading

Lower Cybercrime Costs! Attack Humans...

This could be a headline on a dark web site for cyber criminals. And it would be correct. Our colleagues at Wombat did some digging and came up with relevant research you should know ...
Continue Reading

Mobile Phishing Attacks Jump, Financial Industry Is Biggest Target

Jason Koestenblatt at Enterprise Mobility Exchange wrote: "Thanks to the amount of time employees are spending online to get work done, hackers have a veritable treasure trove of ...
Continue Reading

CyberheistNews Vol 7 #41

Continue Reading

Ransomware Spear Phishing Attack Used To Hide 60M Cyberheist

In a classic "divert their attention", the Taiwan Far East Bank was first attacked with spear phishing emails that pointed to malicious executables, which were clicked on by employees. ...
Continue Reading

KnowBe4 Customer: "I’m not happy at all. More like ecstatic."

In our series "What customers say about us" here is another email with feedback that I got when I asked if they were a happy camper. We will let the customer speak for himself: "I’m ...
Continue Reading

New Worry For CEOs: A Career-Ending Cybersecurity Breach

Corporate chiefs get more involved in defense against hackers, fearing a cybersecurity breach could cost their jobs, hurt their businesses. Vanessa Fuhnmans wrote an excellent heads-up ...
Continue Reading

Watch Out For This New Amazon Phishing/Phone Password Scam

So here’s a new one: a spoofed Amazon email claiming that Amazon has detected an unauthorized attempt to reset the password on the recipient’s account. A six digit code is provided along ...
Continue Reading

A New Spear Phishing Attack Uses Compromised Government Servers And DNS

Cisco's Talos malware researchers posted about a highly sophisticated, targeted spear phishing attack using malicious Word attachments, spoofed to look like it was from the U.S. ...
Continue Reading

Carbon Black Says Ransomware Kit Sales On The Dark Web Shoot UP 2,502%

A new report from Carbon Black’s Threat Analysis Unit (TAU) used their data and modeling techniques to come up with an estimate of ransomware sales transactions activity on the Dark Web. ...
Continue Reading

Scam Of The Week: Las Vegas Shooting Victims Charity

And again—it is enough to make you nauseous—low-life scum on the internet is using a tragedy and try to scam money out of people that want to help the victims. The Nevada Attorney ...
Continue Reading

Third Quarter 2017 Top-Clicked Phishing Email Subjects [INFOGRAPHIC]

KnowBe4 customers run millions of phishing tests per year, and we report quarterly on the latest top-clicked phishing email subjects in 3 separate categories: subjects related to social ...
Continue Reading

How did the Ukraine become a Hotbed of Criminal Hacking?

The New York Times came out with a great backgrounder why the Ukraine is such a hotbed for cyber criminals like Gennadi Kapkanov, 33, a Russian-born Ukrainian hacker, the man suspected of ...
Continue Reading

The Notorious Dark Overlord Mafia Escalates their Ransomware Threat

News has surfaced that the overseas Dark Overlord cyber mafia struck again and penetrated the Columbia Falls School Board system with ransomware. The seven-page ransom letter was filled ...
Continue Reading

New Phishing Report: 90% of IT Execs Worry Most About Email Threats

Our colleagues at Phishme released the results of their US Phishing Response Trends Report, which looked at the phishing response strategies of two hundred senior IT security ...
Continue Reading

New Survey: IT Security Spending Is Up, But Security Is Not, Ransomware Is The Biggest Worry

The second-annual Cyren-Osterman Research U.S. security survey shows a significant disconnect between rising IT security spending and a low level of confidence in current protection, ...
Continue Reading

Two Important KnowBe4 Product Updates

1) KnowBe4 Announces Powerful New Feature: Smart Groups We have added a powerful new feature, Smart Groups, that will help you automate the path your employees take to smarter security ...
Continue Reading

KnowBe4’s Record Q3 2017 Performance Fueled by Innovation and Increased Demand

Some excellent news. We announced record results for our Q3 2017, sales were 2.63X greater than Q3 2016. Q3 2017 marks our 18th straight quarter of growth, driven by an increasing ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews