Targeted Lawsuit Phishing Attack With Sophisticated Payload

Sep 13, 2016 4:11:55 PM By Stu Sjouwerman

We are seeing a big phishing wave with a social engineering attack that threatens with a personalized lawsuit using the domain name of the targeted victim. This is an interesting payload ...

"But, But, But... I Didn't Click!" False Positives In Phishing Tests

Sep 10, 2016 9:55:51 AM By Stu Sjouwerman

The following question was posted in the SANS Securing The Human forum. I thought it was a very good point and asked our VP Product Greg Kras for his perspective. First the question:

Funny Phishing Story: Your Online Order Receipt

Sep 10, 2016 9:21:34 AM By Stu Sjouwerman

A customer sent us this: Hi, I wanted to share with you a funny story…. My boss calls me into her office, very serious like. She sits me down and asks “Did you use the company credit card ...

Coming Soon to an Inbox Near You: A New Type Of Tech Support Scam

Sep 9, 2016 7:29:48 AM By Stu Sjouwerman

By Eric Howes, KnowBe4 Principal Lab Researcher. Yesterday we spotted an unusual phishing email that we'd like to share with readers. If nothing else, it tells us that the increased ...

Phishing Attack With Malicious Word Doc Changes Proxy Settings

Sep 6, 2016 3:20:31 PM By Stu Sjouwerman

Microsoft recently came across a threat that uses social engineering but delivers a different payload than the usual Office document with macros. Its primary purpose is to change a user’s ...

Criminal Phishing-as-a-Service Platform Steals Credentials

Sep 1, 2016 5:15:25 PM By Stu Sjouwerman

Want someone's credentials? Just social engineer them. Phishing is still responsible for 91% of data breaches and has been for the last few years. A Russian cyber mafia has created a ...

CrowdStrike: "Russian Hackers Attack DC Think Tanks With Phishing Emails"

Aug 31, 2016 8:13:02 AM By Stu Sjouwerman

The Wall Street Journal reported this morning that "A Russian hacking group linked to a series of computer intrusions at the Democratic National Committee and other organizations is now ...

The Ultimate Pop-up Phishing Warning Message

Aug 15, 2016 4:54:20 PM By Stu Sjouwerman

'Just weeks after she started preparing opposition research files on Donald Trump’s campaign chairman Paul Manafort last spring, Democratic National Committee consultant Alexandra Chalupa ...

Yes, that email is really from Paypal. And, yes, it's really malicious.

Aug 1, 2016 7:36:36 PM By Stu Sjouwerman

Score another one for the bad guys, who have yet again demonstrated their seemingly inexhaustible ability to concoct new methods to exploit legitimate services in order to bypass existing ...

First Half 2016 Top 10 Phone Scams Revealed

Jul 31, 2016 9:48:22 AM By Stu Sjouwerman

You may not have heard of Atlanta-based Pindrop Labs. They have developed an innovative way to detect fraudulent phone calls called a "phone print", and their solutions reduce fraud ...

New KnowBe4 Phishing Templates: A Summary 7/30/2016

Jul 30, 2016 11:26:31 AM By Stu Sjouwerman

Over the past few weeks our Phishing Templates Mistress Katie and her team have added 17 new templates for use by customers in their simulated phishing campaigns.

Scam Of The Week: FBI Warns Against Data Breach Extortion

Jul 11, 2016 7:58:40 AM By Stu Sjouwerman

The number of data breaches keeps going up. Last week it was more than 1,000 Wendy's where credit card records got ripped off. Fraudsters quickly use the news release of a high-profile ...

IT pros: Half Of Our CEOs Fall Victim To Phishing Scams

Jun 29, 2016 7:55:18 AM By Stu Sjouwerman

Executive boards need better cyber security training, given half of C-level execs fall victim to phishing attacks, according to research conducted by security firm AlienVault. The ...

Scam Of The Week: Orlando Nightclub Phishing Attacks

Jun 17, 2016 5:56:24 PM By Stu Sjouwerman

Just when you think they cannot sink any lower, criminal internet scum is now exploiting the tragedy in Orlando. Unfortunately, from this spot I have been warning about these lowlifes ...

New Type of Spear Phishing Directly Targeted at IT Pros

Jun 12, 2016 8:15:40 AM By Stu Sjouwerman

A member of the SpiceWorks IT forums reported he had received a new type of hybrid attack: first a phone call to his desk, followed up with a phishing email laced with malware, promoting ...

Scam Of The Week: Nasty Two-factor Auth Text Hack

Jun 11, 2016 11:21:12 AM By Stu Sjouwerman

We all know that two-factor authentication (2FA) is much better than just simple user/password credentials. However, there is a nasty spoofing trick that bypasses 2FA if the user does not ...

[INFOGRAPHIC] Don't Be The Victim Of A Cyberheist

Jun 2, 2016 2:48:57 PM By Stu Sjouwerman

We have created a new infographic for your users, as part of your ongoing security awareness training program. It's a few good reminders how to stay safe online, and to keep their ...

Phishing Attacks Ramp Into 2016 With Major Increase

Jun 2, 2016 7:18:11 AM By Stu Sjouwerman

In its most recent Phishing Trends Report, the APWG noted a 250% increase in phishing sites between October 2015 and March 2016 — and the 2016 increase shows the never ending criminal ...

The Nightmare of Exploits Past. How Phishing Attacks Use Old Vulnerabilities

May 28, 2016 11:57:16 AM By Stu Sjouwerman

By Eric Howes, KnowBe4's Principal Lab Researcher Remember .PIF files? If you're like us, the extension probably rings a bell somewhere deep in the dustiest recesses of your mind -- the ...

[ALERT] Fraudsters Steal Tax, Salary Data From ADP. Are Employees At Risk?

May 18, 2016 10:33:03 AM By Stu Sjouwerman

It turns out that HR giant ADP, which provides payroll, tax and benefits administration for more than 640,000 companies, was vulnerable to an ID theft scam. The criminal hackers made off ...

Security Awareness Training Blog

Phishing Blog

View Topics