Ransomware Operators Try to Recruit Insiders

Jan 26, 2022 8:37:30 AM By Stu Sjouwerman

Sixty-five percent of organizations report that their employees have been contacted by ransomware attackers in an attempt to recruit insider threats, according to researchers at Pulse and ...

A Generational Divide Among Social Engineering Victims

Jan 24, 2022 9:11:49 AM By Stu Sjouwerman

Younger and older people differ in their susceptibility to different types of social engineering attacks, according to researchers at Avast. Younger people tend to fall for scams ...

FBI: US Defense Industry Organizations Targeted with USB-Based Ransomware Attacks

Jan 21, 2022 8:24:40 AM By Stu Sjouwerman

Using mailed out “BadUSB” drives as the initial attack vector, cybercriminals are attempting to infiltrate sensitive networks and infect them with BlackMatter or REvil ransomware strains.

A Cyberespionage Group Uses Social Engineering

Jan 19, 2022 8:33:29 AM By Stu Sjouwerman

A sophisticated China-aligned threat actor is using social engineering to carry out cyberespionage and financially motivated attacks, according to researchers at Trend Micro.

North Korean Cryptocurrency Theft Relies on Social Engineering

Jan 18, 2022 11:59:26 AM By Stu Sjouwerman

A North Korean threat actor being called “BlueNoroff,” a subunit of Pyongyang’s Lazarus Group, has been targeting cryptocurrency startups with financially motivated attacks, researchers ...

Fifty FIFA eSports Accounts Were Hacked Via Social Engineering

Jan 13, 2022 3:08:08 PM By Stu Sjouwerman

Video game maker Electronic Arts (EA) has stated that around fifty high-profile accounts for the soccer game FIFA 22 were hacked after attackers manipulated the company’s customer service ...

Business Email Compromise Attack Leads to Millions in Non-Profit Loss

Jan 11, 2022 9:52:45 AM By Stu Sjouwerman

A business email compromise attack at Illinois’s Office of the Special Deputy Receiver led to a loss of $6.85 million, Ray Long at the Chicago Tribune reports. Long describes the Office ...

Obvious, but Probably Effective: Konni RAT Screensaver

Jan 6, 2022 1:20:04 PM By Stu Sjouwerman

A North Korean threat actor is targeting users in Russia with a New Year’s Eve-themed phony screensaver file, the Record reports. Researchers at Cluster25 spotted the activity, and say ...

Shoulder Surfing is Still a Thing for Successful Social Engineering Attacks

Jan 4, 2022 10:03:50 AM By Stu Sjouwerman

Social engineering isn’t concerned with either novelty or elegance. All that matters is whether it works. ESET’s Jake Moore described a case in point for We Live Security: all someone ...

5 Notable Obscure Phishing Scams

Dec 29, 2021 11:01:12 AM By Roger Grimes

I love that KnowBe4’s customers are among the most knowledgeable and educated people in the world in avoiding phishing scams. KnowBe4’s products help its customers to educate and test ...

New Nigerian Phishing Scams Target U.S. Military Families with Needed “Services”

Dec 23, 2021 4:17:23 PM By Stu Sjouwerman

With loved ones potentially a half a world away, scammers prey on families with scams that offer to assist with communication, care packages, leave, and more.

Having an Efficient Security Awareness Training Program

Dec 23, 2021 9:06:46 AM By Roger Grimes

I love that KnowBe4’s customers are among the most knowledgeable and educated people in the world in avoiding phishing scams. KnowBe4’s products help its customers to educate and test ...

Spam Calling Rates Spike Globally

Dec 20, 2021 11:56:12 AM By Stu Sjouwerman

Spam calls in the US spiked in October, according to Truecaller’s annual Global Spam Report. The report observed that Truecaller customers in the US received 3,115,861 spam calls in ...

$148 Million Lost to Gift Card Scams in 2021 (So Far)

Dec 16, 2021 12:44:04 PM By Stu Sjouwerman

A US Federal Trade Commission (FTC) data spotlight has found that people in the US lost $148 million to gift-card-related scams in the first nine months of 2021. The spotlight also found ...

Netflix is the Latest Impersonated Brand in Ongoing Subscriber Targeting Scams

Dec 15, 2021 4:23:55 PM By Stu Sjouwerman

With the increased interest in and availability of movie and TV streaming services, plenty of new scams are popping up attempting to steal personal details and credit card information.

Answer 4 Simple Questions To Avoid a Social Engineering Attack

Dec 14, 2021 2:19:57 PM By Roger Grimes

I am usually not a man of a few words. I am the opposite. I write hundreds of pages a month and talk non-stop in person. But lately, I have been trying to be better at saying more with ...

Socially Engineering Your Way to Customer Data

Dec 13, 2021 9:09:38 AM By Stu Sjouwerman

US telecommunications company Cox Communications has disclosed a data breach that exposed some customers’ information, BleepingComputer reports. The company said in a breach notification ...

2021 Security Hints & Tips for Holiday Travels

Dec 9, 2021 4:00:15 PM By Stu Sjouwerman

The holiday season may be closer to "normal" this year, and that means your users will be even more focused on holiday activities - including travel. Cybercriminals will undoubtedly be ...

New Phishing Campaign has Fake DHL Shipping

Dec 6, 2021 4:14:40 PM By Stu Sjouwerman

Researchers at Avanan have spotted a new phishing campaign that’s impersonating DHL with phony shipping notifications. The emails inform the recipients that they need to update their ...

Bitcoin Scam Videos on Instagram are Part of an Elaborate Account Takeover Scam

Nov 30, 2021 10:55:20 AM By Stu Sjouwerman

This elaborate scam uses social engineering to trick victims into sending the hacker Bitcoin while holding Instagram accounts hostage.

Security Awareness Training Blog

Social Engineering Blog

View Topics