Ransomware Resume Phishing Security Test Gets Monster Open Rate

Jun 19, 2015 11:30:00 AM By Stu Sjouwerman

Now here is a real IT Horror Story. A brand new KnowBe4 customer which had not yet trained their employees decided to test their staff with one of the new templates we had just released.

LastPass Hacked. Be Alert For Phishing Attacks

Jun 16, 2015 9:28:00 AM By Stu Sjouwerman

LastPass, the popular online password management service has been hacked and data was stolen, including the password hints, which is why you need to be alert for scams trying to exploit ...

Gone phishing: How I taught my users to stop clicking everything

Jun 13, 2015 11:24:03 AM By Stu Sjouwerman

Familiar with SpiceWorks? It's the world's largest IT Admin community. One user wrote the 392nd entry in their Spotlight on IT. This is the story. There is a link at the end to the ...

The Truth About The Massive OPMgate Hacking Scandal

Jun 13, 2015 9:17:00 AM By Stu Sjouwerman

The recent U.S. Government Office of Personnel Management hack is getting worse by the day. In Saturday's Wall Street Journal they revealed that apart from more than 4 million personal ...

Adult Friend Finder Hack Is Nightmare Phishing Problem

May 23, 2015 10:21:00 AM By Stu Sjouwerman

Guys, we have a real phishing problem with this Adult Friend Finder (AFF) hack. This particular adult site is one of the most heavily-trafficked websites in the U.S. and has 40 million ...

Researchers Observe SVG Files Being Used To Distribute Ransomware

May 23, 2015 8:04:00 AM By Stu Sjouwerman

Researchers with AppRiver have observed attackers sending out phishing emails with SVG files attached – these files, when downloaded and executed, open up websites that download what ...

Phishing in the C-Suite: 96% of Executives Vulnerable to Attacks

May 11, 2015 9:50:36 AM By Stu Sjouwerman

According to a recent survey, 96% of executives failed to tell the difference between a real email and a phishing email 100% of the time.

How Phishing Malware Rombertik Kills Your Hard Drives

May 9, 2015 1:20:00 PM By Stu Sjouwerman

InfoSec researchers at Cisco's TALOS group discovered a strain of malware that spreads through phishing. Attackers use social engineering tactics to entice users to download, unzip, and ...

What our customers are saying about our security awareness training

May 7, 2015 10:49:00 AM By Stu Sjouwerman

One of our customers sent us this today: "I wanted to give you an update on our security awareness training. When we did the baseline phishing campaign for 85 employees and we had a click ...

Your Antivirus Enduser Is Exposed To Phishing Attacks For 17.5 Hours

May 2, 2015 1:04:00 PM By Stu Sjouwerman

The 2015 Websense threat report is abundantly clear about it. "Websense detected 28 percent of malicious email messages before an antivirus signature became available, presenting AV users ...

10 Lessons Learned From Painful Ryanair $5M Cyberheist

May 1, 2015 5:44:00 PM By Stu Sjouwerman

Low-cost airline Ryanair shamefacedly came clean last week that they fell victim to a cyberheist which stole almost 5 million dollars out of its fuel bank account. The money was siphoned ...

Social Engineering Exploit Fools HR with Infected IT Resumes

May 1, 2015 1:58:17 PM By Stu Sjouwerman

Proofpoint threat researchers recently detected a clever email-based attack that combines phishing and social engineering techniques in order to trick users into opening a malicious ...

Scam Of The Week: Nepal Earthquake

Apr 30, 2015 9:58:00 AM By Stu Sjouwerman

More than 5,000 people dead and counting. And you can also count on cyber-criminals exploiting the disaster. What else is new. Disgusting. Scammers are now using the Nepal disaster to ...

How Criminals Exploit Gaps In Your Security Awareness Training

Apr 26, 2015 12:29:00 PM By Stu Sjouwerman

I was at RSA in San Francisco last week. Great show, with ~30,000 attendees and packed exhibit halls at the Moscone Center. We invited KnowBe4 customers who were attending RSA for a ...

90% of phishing incidents trace back to PEBKAC and ID10T errors

Apr 19, 2015 9:43:14 AM By Stu Sjouwerman

Don't have time to read through the massive Verizon's 2015 Data Breach Investigations Report? Here is a great summary; 90% of Security incidents are still caused by PEBKAC and ID10T ...

If You Think Security Awareness Training is Expensive, Try Ignorance

Apr 15, 2015 11:02:00 AM By Stu Sjouwerman

Facts surrounding spear phishing all point to employees as the most cited culprits and security awareness training as the most effective remedy. Yet all training programs are not equal. ...

KnowBe4 Offers White House Free Security Awareness Training

Apr 8, 2015 7:47:00 AM By Stu Sjouwerman

April 7, 2015 - CNN reported that The White House said it noticed suspicious activity in the unclassified network that serves the executive office of the president. The KnowBe4 Blog ...

Facebook sends simulated phishing attacks to their employees

Apr 7, 2015 1:31:00 PM By Stu Sjouwerman

Fortune reported: "Each fall, Facebook hosts an event called Hacktober in which its security experts attempt to trick employees into falling for common hacking tricks such as phishing ...

SHOCKER: Data Breaches Cost Big Companies Very Little

Apr 6, 2015 5:16:21 PM By Stu Sjouwerman

Two articles today in Fortune Magazine and Harvard Business Review each lifted a piece of the veil about a dirty little secret about data breaches. From Home Depot to Target to Sony, big ...

Police Pay Ransom After Ransomware Phishing Attack

Apr 6, 2015 11:09:47 AM By Stu Sjouwerman

TEWKSBURY – Last December Tewksbury Police confronted a new, and growing, frontier in cyberterrorism when the CryptoLocker ransomware virus infected the department’s network, encrypting ...

Security Awareness Training Blog

Phishing Blog

View Topics