Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Bloomberg Reports: Stealth QR Code Phishing Attack On Major US Energy Company

During my two years as the CEO of a Public Company, Bloomberg became one of my go-to sources for financial news. I am still subscribed and today found an interesting story from Drake ...
Continue Reading

[Must Know] Cybercriminals May Already Have Hacked Your LinkedIn Account. How To Secure.

New reports show many LinkedIn users have reported complaints about accounts being taken over by bad actors.
Continue Reading

Not Another Voter Registration Scam (But It Looks Like One)

The UK government’s voter registration website is causing confusion again, according to Ax Sharma at BleepingComputer. The site, hosted at a “.com” address, often makes users wonder if ...
Continue Reading

Ransomware Attacks Surge as Generative AI Becomes a Commodity Tool in the Threat Actor’s Arsenal

According to a new report, cybercriminals are making full use of AI to create more convincing phishing emails, generating malware, and more to increase the chances of ransomware attack ...
Continue Reading

Online Scams Targeting Individuals Double in a Single Quarter as Global Risk Rises

New analysis of the second quarter of this year makes it clear that individuals and organizations alike are at an increasing risk of web- and email-based scams.
Continue Reading

Social Media Platforms Become Half of all Phishing Attack Targets

Social platforms are the current favorite target of cybercriminals, displacing financial institutions, providing cybercriminals with credentials to be used as launch points for further ...
Continue Reading

Ransomware's Paradox: Why Falling Monetization Rates Are Accompanied by Soaring Ransom Payments - A Must-Read Analysis.

Grab a cup of coffee, and let's talk about something that's been making waves in the cybersecurity world: ransomware. You've probably heard about the alarming rise in ransom payments, but ...
Continue Reading

Ransomware Distributed by Fake Tripadvisor Reviews

The Knight ransomware-as-a-service offering (formerly known as “Cyclops”) is using phony TripAdvisor complaints to deliver its malware, BleepingComputer reports.
Continue Reading

[FREE RESOURCE KIT] Cybersecurity Awareness Month Kit 2023 Now Available

Get the resources you need to help keep your users safe from malicious social engineering attacks during this year's Cybersecurity Awareness Month with our free resource kit.
Continue Reading

KnowBe4 Celebrates Winning a Tech Cares Award From TrustRadius 2023

For the fourth consecutive year, we received a Tech Cares Award from TrustRadius! This fourth annual award celebrates companies that have gone above and beyond to provide strong Corporate ...
Continue Reading

Beware of Clickbait PDF Phishing Attacks Lurking in Search Results

We previously reported independently on PDF-based phishing attacks skyrocketing and the rise of SEO attacks. A recent research study found that the combination of both is quite common. ...
Continue Reading

Gootloader Malware Uses Social Engineering to Target Law Firms (or their Clients)

Law firms are being targeted by a large number of social engineering attacks involving the Gootloader malware delivery tool, according to researchers at Trustwave.
Continue Reading

AI's Role in the Next Financial Crisis: A Warning from SEC Chair Gary Gensler

TL;DR - The future of finance is intertwined with artificial intelligence (AI), and according to SEC Chair Gary Gensler, it's not all positive. In fact, Gensler warns in a 2020 paper ...
Continue Reading

[Live Demo] Boost Your Email Security Defense - PhishER Plus to the Rescue!

Now there's a super easy way to keep malicious emails away from all your users through the power of KnowBe4 PhishER Plus!
Continue Reading

[GUIDE] Scary SEO and Waterhole Attacks: What You Need to Know Now

Most social engineering scams search out their potential victims, often sending emails to known email addresses, sending chat messages to them or calling known phone numbers. The ...
Continue Reading

Number of Named Ransomware Victim Organizations Jumps 64% in One Quarter

The second quarter of this year has become the focus of some new firsts in ransomware attacks, according to new data from cybersecurity vendor Reliaquest.
Continue Reading

Salesforce Becomes the Latest Platform to Unwittingly Aid Phishing Scammers

Cybercriminals used the legitimacy of Salesforce’s email gateway to bypass security scanners and target Meta customers in an effort to steal Facebook credentials.
Continue Reading

Comcast: 9 out of 10 Attempts to Breach Customer Networks Start with a Phish

The latest data from Comcast Business’ analysis of over 23.5 billion cyber attacks on their business customers shows the importance and role of phishing in attacks.
Continue Reading

AI's Role in Cybersecurity: Black Hat USA 2023 Reveals How Large Language Models Are Shaping the Future of Phishing Attacks and Defense

At Black Hat USA 2023, a session led by a team of security researchers, including Fredrik Heiding, Bruce Schneier, Arun Vishwanath, and Jeremy Bernstein, unveiled an intriguing ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews