Social Engineering Used To Establish Shady Bulletproof Hosting

Aug 22, 2019 6:49:31 AM By Stu Sjouwerman

Brian Krebs has reported that a dubious Internet provider, “Resnet,” was renting out tens of thousands of residential IP addresses to be used as proxies by fraudsters and spammers. ...

Ransomware Hits Fortnite Players

Aug 21, 2019 4:21:42 PM By Stu Sjouwerman

DarkReading reports: "Ransomware masquerading as game "cheats" is hitting Fortnite players. Fortunately, there are ways to recover without paying a ransom." Similar to phishing attacks on ...

Is The Ransomware Debate Over? To Pay Or Not To Pay, The Conference Of Mayors Made Up Their Mind

Aug 21, 2019 6:59:56 AM By Stu Sjouwerman

The long-standing argument over whether or not to pay may have come to an end, with a resolution from the U.S. Conference of Mayors calling on cities to not pay up.

Gift Cards Are Now the #1 Business Email Compromise Cash-Out Mechanism for Fraudsters

Aug 20, 2019 5:03:24 PM By Stu Sjouwerman

Overtaking wire transfers and payroll diversion, gift cards have taken a material lead as one of the easiest and least recoverable ways to cash out of a fraud scam.

U.S. Government Stresses the Need for Cybersecurity Awareness and Education in Light of Ransomware Attacks on Government Entities

Aug 20, 2019 4:59:30 PM By Stu Sjouwerman

In light of the recent string of attacks that seem to be targeting government agencies and municipalities, a new multi-agency press release provides guidance on how to be resilient.

Game Phishing Scams Steal Steam Accounts

Aug 20, 2019 4:56:43 PM By Stu Sjouwerman

A phishing scam is stealing Steam accounts by promising free games to victims if they log in to a website with their Steam credentials, according to a recent post by BleepingComputer.

KnowBe4 Applauds Proposed Legislation for Cybersecurity Training Requirement for U.S. House Members

Aug 20, 2019 4:48:48 PM By Stu Sjouwerman

On May 10, 2019, U.S. Representative Kathleen Rice (D-NY) introduced legislation that will require House Members to partake in annual cybersecurity training. At this time, elected ...

Blank Emails Come Before BEC Fraud Attack

Aug 19, 2019 4:59:03 PM By Stu Sjouwerman

Business email compromise (or CEO fraud) has its reconnaissance phase, too. Researchers at Agari say they’ve found that blank, unsolicited emails are often an early sign that a BEC gang ...

The Wall Street Journal Just Published An Interview with Kevin Mitnick, KnowBe4's Chief Hacking Officer

Aug 17, 2019 7:46:14 AM By Stu Sjouwerman

August 16, 2019 - Randy Maniloff wrote about Kevin in the WSJ "Weekend Interview". It's a great article that covers his start as a teenage hacker, how he wound up in jail, and how he ...

Are Local Government and Municipalities Part of a Coordinated Attack on the U.S.?

Aug 15, 2019 3:17:12 PM By Stu Sjouwerman

There are too many ransomware attacks to ignore the similarities. It’s either government networks are easy prey, or someone is trying to cash out on the U.S., one attack at a time.

Social Engineering Testing is Necessary to Fend off Phishing Attacks

Aug 15, 2019 3:14:23 PM By Stu Sjouwerman

The success of social engineering as part of phishing and spear phishing attacks has caused organizations to realize they need an effective tactic to make employees vigilant.

The Unusual Activity Would be the Warning Itself

Aug 15, 2019 7:01:40 AM By Stu Sjouwerman

BleepingComputer has come across a phishing campaign that’s spoofing “Unusual sign-in” warnings from Microsoft to steal users’ credentials. The emails look nearly identical to Microsoft’s ...

Even when your users don't click...

Aug 14, 2019 10:40:34 AM By Stu Sjouwerman

...they can still be helping the bad guys compromise your organization. Sad but true.

Report: Data Breach in Biometric Security Platform Affecting Millions of Users

Aug 14, 2019 7:22:48 AM By Stu Sjouwerman

Led by internet privacy researchers Noam Rotem and Ran Locar, vpnMentor’s team recently discovered a huge data breach in biometrics security platform BioStar 2. Once stolen, fingerprint ...

BYOD Really Means Bring Your Own Risk

Aug 14, 2019 7:04:03 AM By Stu Sjouwerman

A new survey by Nationwide Insurance found that while 83 percent of small businesses let their employees work from home when necessary, one-fifth of these companies don’t provide ...

Still Dodging that Sextortion Bullet

Aug 13, 2019 5:27:18 PM By Stu Sjouwerman

It has long been true that sextortionists really had nothing on their intended victims. No video, no screen captures, nothing at all beyond shame and an uneasy conscience. Unfortunately ...

Security warning for software developers: You are now prime targets for phishing attacks

Aug 13, 2019 11:25:00 AM By Stu Sjouwerman

Danny Palmer at ZDNet wrote: "Software developers are the people most targeted by hackers conducting cyberattacks against the technology industry, with the hackers taking advantage of the ...

Scam Of The Week: See Jeffrey Epstein Last Words On Video

Aug 12, 2019 8:47:51 AM By Stu Sjouwerman

This weekend, news broke that Jeffrey Epstein was found dead in his cell, apparently a suicide. This is a celebrity death that the bad guys are going to be exploiting in a variety of ways ...

3 Important Facts to Take Away From the New Data Security Law

Aug 12, 2019 6:59:37 AM By Stu Sjouwerman

By Lecio De Paula, Jr., Director of Data Privacy, KnowBe4. New Hampshire joins Ohio, South Carolina, and Michigan in enacting a new data security law directed at insurers modeled after ...

Three Lessons from a Recent MegaCortex Ransomware Phishing Attack

Aug 12, 2019 6:55:16 AM By Stu Sjouwerman

The MegaCortex strain of ransomware has been used in criminal campaigns targeting businesses as opposed to private individuals. The QuickBooks cloud-hosting firm iNSYNQ, has sustained ...

Security Awareness Training Blog