Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Seagate Sued By Own Employees For CEO Fraud Attack

Hard drive manufacturer Seagate was sued by its own employees as the result of a successful CEO fraud attack where all the personal information of 10,000 existing and former employees ...

Philadelphia Ransomware Strain Offers "Mercy" Button

Larry Abrams at Bleepingcomputer reported on a new strain that raises some eyebrows. "A new version of the Stampado ransomware called Philadelphia has started being sold for $400 USD by a ...

Scam Of The Week: A New Type Of Tech Support Fraud

We spotted an unusual phishing email which revealed a new scam your users will soon find in their inbox. Time to inoculate them before it becomes a problem! Many online service providers ...

Having some Phun With Phishers - CEO Fraud Blow-By-Blow

For the last 9 years I have been a board member of the public/private Clearwater Downtown Partnership. And as many public organizations, all the board member information is freely ...

"But, But, But... I Didn't Click!" False Positives In Phishing Tests

The following question was posted in the SANS Securing The Human forum. I thought it was a very good point and asked our VP Product Greg Kras for his perspective. First the question:

Funny Phishing Story: Your Online Order Receipt

A customer sent us this: Hi, I wanted to share with you a funny story…. My boss calls me into her office, very serious like. She sits me down and asks “Did you use the company credit card ...

KnowBe4 Is Hiring: QA Engineer and Sr Ruby Developer

Hi All, KnowBe4 is looking for a few good people. Specifically we are hiring a QA Engineer and a Senior Ruby Developer. Know anyone? Send them to our Jobs page on the website. KnowBe4 is ...

Coming Soon to an Inbox Near You: A New Type Of Tech Support Scam

By Eric Howes, KnowBe4 Principal Lab Researcher. Yesterday we spotted an unusual phishing email that we'd like to share with readers. If nothing else, it tells us that the increased ...

Tampa FBI: Your business is going to get hacked (or get infected with ransomware)

The Tampa Bay Business Journal published an interview with FBI Special Agent Lawrence Wolfenden. Wolfenden is a 25-year veteran of the FBI, the lead agency for investigating cyber attacks ...

Phishing Attack With Malicious Word Doc Changes Proxy Settings

Microsoft recently came across a threat that uses social engineering but delivers a different payload than the usual Office document with macros. Its primary purpose is to change a user’s ...

New Cry Ransomware Strain Has Unusual Advanced Features

Larry Abrams at Bleepingcomputer reported on a new strain with a few unusual features: "A new ransomware that pretends to be from a fake organization called the Central Security Treatment ...

Evidence Hillary Was Speared In Phishing Attack

The Smoking Gun reported: "SEPTEMBER 2--The FBI’s Hillary Clinton investigation turned up evidence that her e-mail accounts were targeted in multiple “spear phishing” attacks, one of ...

Criminal Phishing-as-a-Service Platform Steals Credentials

Want someone's credentials? Just social engineer them. Phishing is still responsible for 91% of data breaches and has been for the last few years. A Russian cyber mafia has created a ...

I have an invitation to join a new exciting online community: Hackbusters!

KnowBe4 has been running the HackBusters site for a few years now, providing you with trending IT security news. We are expanding it and have launched a new exciting online community! You ...

Cyberheist Nets 44 Million In Single CEO Fraud Attack

Earlier in August, one of the world's largest cable manufacturers Leoni AG publicly confessed that it had fallen victim to a classic CEO Fraud attack that has cost the company a whopping ...

CrowdStrike: "Russian Hackers Attack DC Think Tanks With Phishing Emails"

The Wall Street Journal reported this morning that "A Russian hacking group linked to a series of computer intrusions at the Democratic National Committee and other organizations is now ...

Two New KnowBe4 Phishing Categories: Scam Of The Week and Reported Phishes of the Week

KnowBe4's Templates Mistress Katie has added two new categories to the System Templates: 1) SCAM OF THE WEEK - this will act as an optional weekly newsletter for you to send to your ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.