Malicious App Impersonates McAfee to Distribute Malware Via Text and Phone Calls

Apr 3, 2024 12:36:29 PM By Stu Sjouwerman

A trojanized version of the McAfee Security app is installing the Android banking Trojan “Vultur,” according to researchers at Fox-IT. The attackers are spreading links to the malicious ...

New Report Shows Phishing Links and Malicious Attachments Are The Top Entry Points of Cyber Attacks

Apr 3, 2024 12:36:17 PM By Stu Sjouwerman

New TTP attack data covering 2023 sheds much needed light on the threat actor and user actions that are putting organizations at the most risk.

Despite Cybersecurity Improvements in UK Organizations, Attacks Still Persist

Apr 1, 2024 11:43:19 AM By Stu Sjouwerman

The UK government's third phase of research shows how well UK organizations have been improving their cybersecurity efforts but indicates that the risk from certain attacks have only been ...

Thread Hijacking Phishing Attack Targets Pennsylvania Journalist

Apr 1, 2024 11:43:16 AM By Stu Sjouwerman

A journalist in Pennsylvania was targeted by phishing attacks that involved thread hijacking, according to Brian Krebs at KrebsOnSecurity.

Russian Federation-backed threat group APT29 Now Targeting German Political Parties

Mar 29, 2024 12:07:37 PM By Stu Sjouwerman

New analysis of APT29’s (aka Cozy Bear) activities and their association with Russia’s Foreign Intelligence Service (SVR) has revealed suspected attempts to collect political intelligence.

Narwhal Spider Threat Group Behind New Phishing Campaign Impersonating Reputable Law Firms

Mar 29, 2024 12:07:32 PM By Stu Sjouwerman

Using little more than a well-known business name and a invoice-related PDF, the “NaurLegal” phishing campaign aims at installing malware trojans.

75% of Organizations Believe They Are at Risk of Careless or Negligent Employees

Mar 29, 2024 11:06:17 AM By Stu Sjouwerman

New data shows organizations are well aware that their users are one of their greatest cybersecurity risks today, and yet aren’t taking the right steps to remediate the risk.

New Malware Loader Delivers Agent Tesla Remote Access Trojan Via Phishing

Mar 29, 2024 11:06:12 AM By Stu Sjouwerman

A new malware loader is delivering the Agent Tesla remote access Trojan (RAT), according to researchers at Trustwave SpiderLabs. The malware is distributed by phishing emails with ...

[New Feature] Start Coaching Your Users in Real Time With the New Google Chat Integration for KnowBe4's SecurityCoach

Mar 28, 2024 9:17:30 AM By Stu Sjouwerman

Attention Google Workspace users! You’ve asked, and we’ve delivered, integrating KnowBe4's SecurityCoach with Google Chat.

A Simple 'Payment is Underway' Phishing Email Downloads RATs from AWS, GitHub

Mar 27, 2024 1:03:46 PM By Stu Sjouwerman

Analysis of a new initial access malware attack shows how simple these attacks can be while also proving that malware can reside on legitimate repositories.

It’s Official: Cyber Insurance is No Longer Seen as a 'Safety Net'

Mar 26, 2024 11:38:51 AM By Stu Sjouwerman

A new report on the state of email security sheds some light on how organizations are viewing and approaching cyber insurance as they shift strategy toward being cyber resilient.

New Phishing-as-a-Service Kit Attempts to Bypass MFA

Mar 26, 2024 11:38:48 AM By Stu Sjouwerman

A Phishing-as-a-Service (PhaaS) platform called “Tycoon 2FA” has surged in popularity over the past several months, according to researchers at Sekoia. The phishing kit is notable for its ...

[New Research] KnowBe4's Report is a Call to Action for Global Organizations to Improve Their Security Culture

Mar 26, 2024 8:00:00 AM By Stu Sjouwerman

We’re thrilled to announce the release of the 2024 Security Culture Report, which dives deep into how security measures affect organizations and the way employees act and feel at work.

The Average Malicious Website Exists for Less Than 10 Minutes

Mar 25, 2024 1:50:14 PM By Stu Sjouwerman

A new Chrome update brings to light Google findings about malicious websites that have serious implications on detecting malicious links, spoofed brands and the use of legitimate web ...

Cloud-Conscious Cyber Attacks Spike 110% as Threat Groups Sharpen their Attack Skills

Mar 25, 2024 8:00:00 AM By Stu Sjouwerman

New data shows increased expertise in leveraging and exploiting cloud environments.

FBI: Losses Due to Cybercrime Jump to $12.5 Billion as Phishing Continues to Dominate

Mar 25, 2024 8:00:00 AM By Stu Sjouwerman

The FBI’s Internet Crime Complaint Center (IC3) newly-released Internet Crimes Report provides an unbiased big picture of the cyber crimes that were the most used and most successful.

Ransomware Group “RA World” Changes Its’ Name and Begins Targeting Countries Around the Globe

Mar 21, 2024 11:37:10 AM By Stu Sjouwerman

The threat group "RA World" (formerly RA Group) has shifted from country-specific ransomware attacks to include specific industries via a new - not previously seen - method of extortion.

[Heads-Up] Phishing Campaign Delivers VCURMS RAT

Mar 21, 2024 8:37:17 AM By Stu Sjouwerman

Researchers at Fortinet are tracking a phishing campaign that’s distributing a new version of the VCURMS remote access Trojan (RAT).

AI and the Boardroom: Bridging Innovation and Security

Mar 19, 2024 1:18:09 PM By James McQuiggan

Today, artificial intelligence (AI) is no longer a futuristic concept but a tool that is driving operational efficiency, customer experience, and decision-making processes. Organizations ...

Phishing Tops 2023’s Most Common Cyber Attack Initial Access Method

Mar 19, 2024 1:18:05 PM By Stu Sjouwerman

New analysis shows that the combination of phishing, email, remote access, and compromised accounts are the focus for most threat actors.

Security Awareness Training Blog

View Topics