KnowBe4 Blog

Social Engineering

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

Crime or Career? What Young People Told Us About Cybercrime Recruitment

"Someone online shows a 'trick' that feels harmless at first. Then the community pulls you in. Everyone's doing it. It feels like skill, not crime." A young person from South Africa, ...

Report: 9 out of 10 Americans Have Been Targeted by Scams

91% of Americans have been targeted by a scam, and 17% have fallen victim to one, according to a new survey by Consumer Reports. Notably, 20% of respondents said the latest scam they ...

Business-Themed Phishing Lures Deliver RMM Tools

Microsoft is tracking phishing campaigns that use various lures to deliver MSP360, a legitimate RMM tool that attackers are abusing to gain a foothold on compromised systems.

Extortion Groups are Impersonating Help Desks to Gain Initial Access

Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters.

Report: Ransomware Attacks Involving Data Theft Are Surging

Ransomware attacks involving data theft have surged by 275% in 2026, according to a new report from Zscaler. Attackers exfiltrated more than 896.2 terabytes of data from victim ...

[Cybersecurity Awareness Month] Trust, but Verify: Navigating the Era of AI Deepfakes

The digital landscape faces a new and complex challenge: the rise of generative AI. While these tools offer incredible potential for innovation, they also provide malicious actors with ...

Warning: Attackers Are Tricking Employees Into Sharing Malicious Calendar Invites

Researchers at Fortra are tracking a new variant of calendar phishing in which threat actors trick employees into sharing meeting links internally. The attackers pose as prospective ...

New Phishing Campaign Uses Claude-Themed Lures

A phishing campaign is targeting Google accounts with lures that promise free subscriptions to Anthropic’s Claude Max AI model, Malwarebytes warns.

Warning: Tech Support Scams Are Abusing Google Ads

Researchers at Netskope are tracking a phishing kit that hijacks users’ browser windows to display fake security alerts. The malicious websites are distributed via Google Ads, and pose as ...

Threat Actors Abuse Trusted Accounts and Internal Tools to Launch Convincing BEC Attacks

Attackers are continually finding new ways to refine business email compromise (BEC) attacks, according to Douglas McKee, Director of Vulnerability Intelligence at Rapid7. When attackers ...