New Novel Campaign Targeting Security Researchers Uses Really Creative Social Engineering to Fool Victims

Feb 12, 2021 4:32:29 PM By Stu Sjouwerman

Pretending to be security researchers themselves, this group of cybercriminals went to great lengths to make sure legitimate security researchers would fall for the attack.

[Scary?] AI Can Now Learn To Manipulate Human Behavior

Feb 12, 2021 10:28:21 AM By Stu Sjouwerman

The Conversation just published something I have been worried about for a while now. Scary? Could be getting that way sometime soon. They said: "Artificial intelligence (AI) is learning ...

[New E-Book] Comprehensive Anti-Phishing Guide

Feb 12, 2021 8:45:42 AM By Stu Sjouwerman

Spear phishing emails remain a top attack vector for the bad guys, yet most companies still don’t have an effective strategy to stop them.

It’s Not Only About the URL

Feb 11, 2021 3:01:41 PM By Roger Grimes

You have to look at the totality of an email to determine whether it is a phishing attack or not.

[HEADS UP] NHS Issues Warning as UK COVID-19 Vaccine Scams Are Still Running Rampant

Feb 11, 2021 11:08:05 AM By Stu Sjouwerman

The National Health Service (NHS) in the UK recently sent a warning that cybercriminals are using social engineering tactics to target people wanting a COVID-19 vaccine email that is ...

US Gmail Users Are Preferred Phishing Targets

Feb 11, 2021 8:26:01 AM By Stu Sjouwerman

Google has found that most phishing attacks (42%) target Gmail users in the US. Users in the UK were the second most targeted, with 10% of attacks. Japan came in third with 5% of phishing ...

New Phishing Attack Uses Google Firebase to Trick Microsoft and Achieve a Spam Confidence Level of Just 1

Feb 10, 2021 2:46:41 PM By Stu Sjouwerman

This new phishing scam takes advantage of inherent trust in credible domains to get past the scrutiny of even Microsoft to trick Office 365 users into giving up their online credentials.

Cannabis Company Loses Millions in BEC Scam

Feb 10, 2021 8:32:27 AM By Stu Sjouwerman

Australian medicinal cannabis company Cann Group has lost $3.6 million in a business email compromise (BEC) attack, Stockhead reports. The company had thought it was paying an unnamed ...

[World Premiere] KnowBe4’s New Season 3 of Netflix-Style Security Awareness Video Series - ‘The Inside Man’

Feb 9, 2021 8:52:30 AM By Stu Sjouwerman

We’re excited to announce Season 3 of the award-winning KnowBe4 Original Series - ‘The Inside Man’. This network-quality video training series delivers an entertaining learning experience ...

Three Tips to Stay Safe on the Road and the Information Superhighway

Feb 9, 2021 7:50:24 AM By James McQuiggan

You surf the world wide web, you scroll through social media feeds, read articles, shop online, and respond to email through the incredible invention of the internet. We're all driving on ...

The Three Best Things You Can Do To Improve Your Computer Security

Feb 9, 2021 7:48:35 AM By Roger Grimes

The three best things you can do to improve your computer security, bar anything, have been the same three things you should have already been doing for the entirety of computers. The top ...

Every Employee is Part of Your Security

Feb 8, 2021 8:27:42 AM By Stu Sjouwerman

Employees are an essential component of an organization’s security defenses, according to Nico Popp, Chief Product Officer at Forcepoint. On the CyberWire’s Hacking Humans podcast, Popp ...

Hackers are Winning the Cyberwar, Largely Because They Target People

Feb 4, 2021 8:26:37 AM By Stu Sjouwerman

Researchers at HackNotice have found that the number of data breaches is increasing, while the number of breach notifications is declining, SecurityWeek reports. HackNotice analyzed ...

Beware the Long Con Phish

Jan 28, 2021 8:00:00 AM By Roger Grimes

Social engineering and phishing happen when a con artist communicates a fraudulent message pretending to be a person or organization which a potential victim might trust in order to get ...

A UK Case Study: Recognizing COVID-19 Phishing

Jan 28, 2021 7:01:12 AM By Stu Sjouwerman

A phishing campaign is using convincingly spoofed offers for COVID-19 vaccination sign-ups, according to Tom Allen at Computing. As vaccines are now being distributed around the world, ...

Confident About Detecting Spoofed, Scam Emails?

Jan 26, 2021 8:25:54 AM By Stu Sjouwerman

A survey by ESET found that most people think they’d be able to identify scam emails while shopping online. 87% of respondents said they felt secure while shopping online, while 73% ...

KnowBe4 Unveils Official Trailer for ‘The Inside Man’ Season 3

Jan 22, 2021 3:16:21 PM By Stu Sjouwerman

We’re excited to announce the official trailer for Season 3 of the award-winning KnowBe4 Original Series - ‘The Inside Man’ is now available! KnowBe4’s network-quality video training ...

The Many Ways You Can Be Phished

Jan 22, 2021 8:38:17 AM By Roger Grimes

Social engineering and deception are as old as humanity itself. Phishing is social engineering and deception via digital means and has been with us since the beginning of computers. After ...

Social Engineering is a Core Element of Nearly Every Cyber Attack

Jan 18, 2021 8:25:46 AM By Stu Sjouwerman

As organizations look to figure out where to strengthen their cybersecurity strategy, industry data provides guidance by pointing at one of the most common aspects of cyberattacks for ...

How Crime Pays, Ransomware Edition

Jan 12, 2021 10:12:46 AM By Stu Sjouwerman

The Ryuk ransomware operators have raked in more than $150 million from their attacks, researchers at Advanced Intelligence and HYAS have found. The researchers describe how these ...

Security Awareness Training Blog

Social Engineering Blog

View Topics