Customer Care Numbers as Phishbait

Mar 2, 2023 8:50:50 AM By Stu Sjouwerman

Researchers at CloudSEK have published a report looking at fraudulent customer service phone numbers in India. The researchers found around 20,000 of these phone numbers targeting users ...

NameCheap’s SendGrid Email Account Compromised, Used to Send Phishing Emails

Mar 1, 2023 1:52:16 PM By Stu Sjouwerman

Since phishing attacks need legitimacy to increase their deliverability, this latest twist shows how phishing scammers and hackers are working together to ensure phishing attacks continue.

Blind Eagle Goes Phishing

Feb 28, 2023 11:52:11 AM By Stu Sjouwerman

BlackBerry has published a report on a threat actor, Blind Eagle, also known as APT-C-36, which has been operating against targets in Ecuador and Colombia since at least 2019. Its most ...

Thousands of NPM Packages Used to Spread Phishing Links

Feb 27, 2023 8:39:49 AM By Stu Sjouwerman

Researchers at Checkmarx warn that attackers uploaded more than 15,000 packages to NPM, the open-source repository for JavaScript packages, to distribute phishing links. The packages ...

Malware Report: The Number of Unique Phishing Emails in Q4 Rose by 36%

Feb 23, 2023 11:28:45 AM By Stu Sjouwerman

With nearly 280 million phishing emails detected by just one vendor, and the increase in the number of unique emails, organizations have a lot to be worried about in 2023.

W-2s Are Just the Beginning of Tax-Related Scams This Year

Feb 23, 2023 11:28:23 AM By Stu Sjouwerman

Email scammers can’t pass up a tried and true theme that is almost guaranteed to produce results. And with W-2 forms being sent out, it marks the start of this year’s expected campaigns.

Ransomware Attacks Using Extortion Tactics Reaches Critical Mass at 96% of all Attacks

Feb 23, 2023 11:28:04 AM By Stu Sjouwerman

New cyber attack data from 2022 is providing insight into what to expect in 2023, including ransomware campaigns.

Should You Click on Unsubscribe?

Feb 21, 2023 4:36:29 PM By Roger Grimes

Some common questions we get are “Should I click on an unwanted email’s ’Unsubscribe’ link? Will that lead to more or less unwanted email?”

[HEADS UP] Russian Hacker Group Launches New Spear Phishing Campaign with Targets in US and Europe

Feb 16, 2023 9:17:56 AM By Stu Sjouwerman

The Russian-based hacking group Seaborgium is at it again with increased spear phishing attacks targeting US and European countries in the last year.

New Survey Reveals Employees are the Attack Surface

Feb 15, 2023 9:18:35 AM By Stu Sjouwerman

A survey by Tanium has found that IT security professionals in the UK say that 64% of avoidable cyber attacks are due to human error, which usually involves falling for phishing attacks. ...

Reddit is the Latest Victim of a Spear Phishing Attack Resulting in a Data Breach

Feb 15, 2023 8:18:20 AM By Stu Sjouwerman

There is a lot to learn from Reddit's recent data breach, which was the result of an employee falling for a “sophisticated and highly-targeted” spear phishing attack.

FTC: Romance Scams Cost U.S. Victims a Total of $1.3 Billion

Feb 15, 2023 8:11:41 AM By Stu Sjouwerman

Seemingly repeating the previous year, the FTC’s latest report highlights that nearly 70,000 people reported being the victim of a romance scam last year.

Cybercriminals are Using Geotargeted Phishing to Target Victims

Feb 14, 2023 9:06:54 AM By Stu Sjouwerman

Attackers are abusing a legitimate service called “GeoTargetly” to launch localized phishing attacks, according to Jeremy Fuchs at Avanan. GeoTargetly is meant to be used by advertisers ...

Hackers Work Around ChatGPT Malicious Content Restrictions to Create Phishing Email Content

Feb 9, 2023 8:51:21 AM By Stu Sjouwerman

Active discussions in hacker forums on the dark web showcase how using a mixture of the Open AI API and automated bot from the Telegram messenger platform can create malicious emails.

Be Wary of Survey Scams

Feb 8, 2023 9:00:43 AM By Stu Sjouwerman

Online surveys are too often scams designed to steal personal or financial information, warns Phil Muncaster at ESET. Muncaster explains that these surveys are usually distributed via ...

[HEADS UP] If You're a Fan of 'The Last of Us' You May be Targeted for These Campaigns

Feb 8, 2023 9:00:40 AM By Stu Sjouwerman

The success of the TV adaption of this PlayStation game 'The Last of Us' has been a huge hit for fans. Unfortunately, this new series has attracted bad actors to exploit for their own ...

Do Not Fall Victim to Cyber Attacks – Find Out What the Latest Hiscox Report Reveals!

Feb 7, 2023 1:52:22 PM By Javvad Malik

Insurance provider Hiscox has published its fifth annual cyber readiness report, which has some eye-opening statistics.

[Scam Of The Week] The Turkey-Syria Earthquake

Feb 7, 2023 9:51:32 AM By Stu Sjouwerman

Just when you think they cannot sink any lower, criminal internet scum is now exploiting the recent earthquake in Turkey and Syria.

[New Feature] Immediately Add User-Reported Email Threats to Your Microsoft 365 Blocklist from Your PhishER Console

Feb 7, 2023 8:00:00 AM By Stu Sjouwerman

Now there’s a super easy way to keep malicious emails away from your users through the power of the KnowBe4 PhishER platform!

A Close Call – PayPal Scam Warning

Feb 6, 2023 2:00:39 PM By Martin Kraemer

On Sunday, I received an urgent message from a friend. PayPal had sent him an email saying that a co-worker had sent him money. This was not unexpected, as he was collecting contributions ...

Security Awareness Training Blog

Phishing Blog

View Topics