Cybercriminals Target Execs in Microsoft 365 Credential Attack to Launch Internal BEC Scams

Aug 11, 2020 9:30:40 AM By Stu Sjouwerman

A new phishing attack spotted in the wild by security researchers at Trend Micro demonstrates how compromised data in an initial cyberattack is purposed in subsequent attacks.

Many US States Requiring Training on COVID-19 Before Return to Work

Aug 11, 2020 9:25:24 AM By Stu Sjouwerman

Many states across the US are now mandating that organizations provide training to your employees before they can return to work. Definitely check your local state guidelines but KnowBe4 ...

Legitimate Accounts for Illegitimate Business Email Compromise

Aug 11, 2020 8:28:12 AM By Stu Sjouwerman

Cybercriminals frequently use email accounts from legitimate services like Gmail to carry out business email compromise (BEC) attacks, Help Net Security reports. Researchers at Barracuda ...

SBA Phishing: Malicious Actors "Return to Roots" in the Hunt for Money

Aug 10, 2020 10:55:00 AM By Eric Howes

By Eric Howes, KnowBe4 Principal Lab Researcher. The COVID-19 pandemic continues to dominate news headlines as well as the development of malicious email attacks designed to separate ...

Cyberattacks Involving Both Data Exfiltration and Ransomware to Ensure Ransom Payment Increase 152%

Aug 10, 2020 8:27:19 AM By Stu Sjouwerman

Ransomware authors are realizing the benefit of either stealing data or just implying they have and threatening to publish the data publicly in order to increase their chances of being ...

Dark Patterns and the Craft of Online Persuasion

Aug 10, 2020 8:22:35 AM By Stu Sjouwerman

People should learn how to spot the tactics companies (and, more importantly, criminals) use to persuade customers (or marks), especially when those tactics are used deceitfully, ...

Nearly Half of Dutch Listed Companies Do Not Provide Information on Cybersecurity in Annual Report

Aug 10, 2020 8:00:00 AM By Stu Sjouwerman

Many publicly traded companies in the Dutch AEX, AMX and AScX indices fail to be transparent on cybersecurity efforts in their annual reports. While the Netherlands is a highly digitized ...

The U.N. counterterrorism chief says a 350% increase in phishing websites was reported in Q1 2020

Aug 7, 2020 4:14:05 PM By Stu Sjouwerman

UNITED NATIONS -- A 350% increase in phishing websites was reported in the first quarter of the year, many targeting hospitals and health care systems and hindering their work responding ...

Leaked U.S.-UK Trade Documents Show How Devastating Compromised Email Can Be

Aug 6, 2020 4:15:57 PM By Stu Sjouwerman

An ongoing criminal investigation highlights how classified documents stolen by Russian hackers from former U.K. trade minister Liam Fox may have been used to impact the British 2019 ...

The Importance of Identifying and Focusing on the Malicious Behavior

Aug 6, 2020 8:31:49 AM By Stu Sjouwerman

Identifying malicious behavior is a more effective long-term strategy than trying to block individual malicious actors, according to Johnathan Hunt, Vice President of Security at GitLab. ...

See Ridiculously Easy Security Awareness Training and Phishing

Aug 6, 2020 8:00:00 AM By Stu Sjouwerman

Join us for a live demo on Security Awareness Training and phishing in action!

Visit KnowBe4 at Black Hat USA 2020 - Virtual Event

Aug 5, 2020 11:26:42 AM By Stu Sjouwerman

Are you attending (the 100% virtual) Black Hat USA 2020? Be sure to stop by the KnowBe4 booth August 5-6th to find out how to secure your last line of defense: USERS.

Explosion of Zoom Meeting Phishing Attacks Over Spring and Summer of 2020 and Targeting Office365 and Outlook Credentials

Aug 5, 2020 8:44:18 AM By Stu Sjouwerman

Researchers at INKY have observed an “explosion” of Zoom-themed phishing attacks over the Spring and Summer of 2020. Most of the attacks are aimed at stealing credentials to services like ...

Security Awareness Training Blog