Phishing Campaign Impersonates Email Alerts From DHS

Jun 21, 2019 10:26:51 AM By Stu Sjouwerman

An ongoing email-based phishing scam is attempting to fool recipients into opening malicious attachments disguised as notifications from the U.S. Department of Homeland Security (DHS), ...

Why Do Organizations Still Under-report Cybercrime?

Jun 21, 2019 9:48:09 AM By Stu Sjouwerman

It’s estimated that organizations aren’t engaging with Law Enforcement when becoming a victim of a cybercrime in large numbers. We cover 5 reasons why organizations don’t.

Bogus Emails: 3.4 Billion Are Sent Every Day...

Jun 20, 2019 7:21:24 AM By Stu Sjouwerman

Research from Valimail shows that at least 3.4 billion phony emails are sent every day, Help Net Security reports. Despite this staggering number, most organizations still aren’t ...

How Hackers Emptied Church Coffers with a Phishing Attack and Social Engineering Phone Call

Jun 20, 2019 7:09:18 AM By Stu Sjouwerman

Cyber thieves aren't bound by a code of ethics. They look for weak targets and high rewards, which is exactly what Saint Ambrose Catholic offered.

Hit by Ransomware Attack, Florida City Agrees to Pay Hackers $600,000

Jun 20, 2019 6:36:50 AM By Stu Sjouwerman

It was all over the press, and even made it in the New York Times: "The leaders of Riviera Beach, Fla., looking weary, met quietly this week for an extraordinary vote to pay nearly ...

[NEW FEATURES] Branded Certificates and End User Surveys

Jun 20, 2019 6:28:47 AM By Stu Sjouwerman

We are excited to announce the release of two new features in the KnowBe4 platform. Branded Certificates and End User Training Surveys!

[Heads-up] Alarming Tool Creates Deep Fakes That Can Now Be Edited With A Text Editor

Jun 14, 2019 6:56:27 AM By Stu Sjouwerman

Voicemail Phishing Scam Steals Credentials

Jun 14, 2019 6:34:57 AM By Stu Sjouwerman

A new phishing campaign is asking victims to click on a link in an email to download a voicemail, My Online Security reports. When recipients click on the link, they’ll be redirected to a ...

FBI’s Advice on Spotting Phishing

Jun 14, 2019 6:28:05 AM By Stu Sjouwerman

The FBI’s Internet Crime Complaint Center (IC3) released a PSA warning that attackers are exploiting people’s trust in sites that use HTTPS. Cybersecurity training has in the past rightly ...

Social Engineering is at the Root of Nearly all Fraud Attacks

Jun 14, 2019 6:13:03 AM By Stu Sjouwerman

According to the latest fraud report from RSA, all four of the documented fraud attack methods use some form of social engineering to trick victims into giving up their money.

Extortion Threatens Reputational Damage

Jun 11, 2019 6:48:11 AM By Stu Sjouwerman

Scammers are sending emails threatening to damage the reputation of websites unless the sites’ owners hand over 0.3 bitcoin, or around $2,400, according to BleepingComputer.

The CIA will not Fix Your Online Rap Sheet

Jun 11, 2019 6:41:16 AM By Stu Sjouwerman

Scammers are still posing as CIA employees and telling victims that they’re about to be arrested for their involvement in an international pedophile ring, according to the Register. The ...

Corporate Email Creates Unavoidable Phishing Risk

Jun 10, 2019 6:29:24 AM By Stu Sjouwerman

It’s impossible to avoid the risk of phishing attacks entirely, since employees still need to do their jobs, as Kelly Sheridan at Dark Reading puts it. Sheridan points to a recent report ...

KnowBe4 Fresh Content and Feature Updates - May 2019

Jun 7, 2019 4:29:56 PM By Stu Sjouwerman

Check out the content and feature updates in the KnowBe4 platform for the month of May!

It only takes three seconds...

May 31, 2019 11:44:23 AM By Stu Sjouwerman

“Statistics suggest the average human being falls for a social engineering attack about four times — with training — before they become ‘inoculated’ against that type of attack,” “Helpful ...

[Policy Template] Should Failing Phishing Tests Be A Fireable Offense?

May 31, 2019 8:00:00 AM By Stu Sjouwerman

Firing employees for failing phishing tests can be extremely counterproductive and can damage an organization’s overall security posture. That, at any rate, is what two security experts ...

"Delete" Notification as Office 365 Phishbait

May 31, 2019 8:00:00 AM By Stu Sjouwerman

Attackers are posing as Office 365 support in phishing emails that warn users about an “unusual volume of file deletion” on their accounts, BleepingComputer has found. The emails claim ...

A Case of Password Spraying

May 31, 2019 8:00:00 AM By Stu Sjouwerman

Citrix last month confirmed the FBI’s suspicions that hackers had used a technique known as “password spraying” to compromise the company’s networks before stealing a massive amount of ...

Impersonation Phishing Attacks Up 67% in Last 12 Months

May 31, 2019 8:00:00 AM By Stu Sjouwerman

Social engineering attacks using impersonation tactics increased by 67% over the past twelve months, according to Mimecast’s annual State of Email Security report. Mimecast surveyed more ...

Why KnowBe4 Is The Only True Global Security Awareness Training Vendor

May 29, 2019 3:37:10 PM By Stu Sjouwerman

Security awareness, by its very nature, relies on communication. And that communication, in turn, relies on clarity so that it can be fully understood and applied by the learner. To be ...

Security Awareness Training Blog