KnowBe4 Blog

Phishing

Learn about current phishing techniques, notable campaigns and attacks, what to watch out for 'in the wild', and more.

View Topics

January 7, 2020 Stu Sjouwerman

New TrickBot Malware Attack Leverages Google Drive to Deliver Its Payload and Ensure Infection

New details from Palo Alto Network’s Unit 42 research team show TrickBot rearing its ugly head once again, using legitimate cloud services – and employee greed – as its path to success. ...

January 7, 2020 Stu Sjouwerman

Penn State Warns of Spear Phishing Attacks

Penn State is warning its community about a recent spike in phishing attacks targeting the university’s employees. Attackers are sending emails posing as real Penn State employees and ...

January 6, 2020 Stu Sjouwerman

Security Generation Gaps

People from different generations tend to approach cybersecurity differently. Organizations should tailor their security programs and phishing tests with this in mind. According to Azeem ...

January 3, 2020 Stu Sjouwerman

U.S. Government Issues Warning About Possible Iranian Cyberattacks

Christopher C. Krebs, Director of Cybersecurity and Infrastructure Security Agency issued a warning about a potential new wave of Iranian cyber-attacks targeting U.S. assets after Maj. ...

January 3, 2020 Stu Sjouwerman

Seven Kinds of Malware, and all Arrive by Social Engineering

Naked Security outlines seven different categories of malware and describes how each of them through social engineering techniques can affect your organization. Some or all of these ...

January 3, 2020 Stu Sjouwerman

Global Climate Change Phishbait

A number of phishing campaigns have been using Christmas-themed emails encouraging recipients to support climate activist Greta Thunberg, according to Paul Ducklin at Naked Security. ...

January 3, 2020 Stu Sjouwerman

More Fake Windows 10 Updates Spell Hefty Ransoms for Victims

With Windows 7 ending support this month, organizations moving to or already on Windows 10 need to be wary of “update” phishing scams intent on installing ransomware.

January 3, 2020 Stu Sjouwerman

New Report Shows the Success of Business Email Compromise Come from a Calculated Attack Approach

The newest data from security vendor Barracuda provides insight into exactly how attackers execute BEC attacks and what makes them so successful.

January 3, 2020 Stu Sjouwerman

[Heads-up] Sextortion Crime Gang Now Uses New Tactics To Bypass Your Spam Filters

In a business environment, employees use Google Translate on a regular basis to get access to documents they need to work with, or websites that are in another language.

January 3, 2020 Stu Sjouwerman

Cities and Governments are the Latest Target in a New “Leakware” Attack

This new type of attack focuses on threatening to steal and publish data on the web, asking for a ransom to be paid to keep the attackers from doing so.