KnowBe4 Blog

Social Engineering

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

Warning: Phishing Operations Are Impersonating Prediction Markets

Fraudsters are exploiting the increased public interest in prediction markets such as PolyMarket and Kalshi, according to researchers at Recorded Future. Criminal groups known as ...

Warning: Scammers Are Targeting Voters Ahead of Election Day

Scammers continue to target voters ahead of the U.S. midterm elections, Malwarebytes reports. The scams arrive via text message, email, or phone call, offering to help users register to ...

Report: Most Fraud Attacks Target Existing Customer Relationships

A new report from TransUnion has found that 81% of digital fraud attacks target existing customer relationships, with more than half of U.S. businesses reporting increased scam and fraud ...

Warning: Romance Scammers Are Targeting US Citizens For Money Laundering

Threat actors are using romance scams to trick U.S. citizens into acting as money mules, the Wall Street Journal reports. The Journal cites the example of Garrick Stafford, a 50-year-old ...

Attackers Abuse Legitimate Infrastructure to Distribute Phishing Emails

Researchers at Cisco Talos are tracking a significant increase in phishing campaigns that abuse legitimate platforms. Attackers abused more than 25 legitimate services over the past year, ...

[Cybersecurity Awareness Month] Why Your Best Incident Reporting Tool Is Behavioral, Not Software

During an incident, the most valuable intel is from people on the ground. Security teams rely on their colleagues across the organization to report issues quickly and without trying to ...

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Phishing attacks are increasingly using legitimate calendar invites to bypass security filters, according to researchers at Netcraft. Attackers send ICS calendar invite files that plant ...

FBI Warns of Phishing Attacks Ahead of the US Midterm Elections

The U.S. FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have issued joint advisories warning of election-themed scams targeting voters and spear phishing attacks ...

Job Seekers Who Use AI for Applications Need to be on the Lookout for Scams

Researchers at Malwarebytes warn that job seekers are increasingly vulnerable to scams as AI enables them to take a “spray-and-pray” approach to job applications. Users who have automated ...

Warning: Calendly Phishing Pages Are Targeting Job Seekers

Researchers at Malwarebytes warn that a phishing campaign is using spoofed Calendly pages to trick users into handing over their Facebook and Google account credentials. The phishing ...