KnowBe4 Blog

Social Engineering

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

Report: Most Fraud Attacks Target Existing Customer Relationships

A new report from TransUnion has found that 81% of digital fraud attacks target existing customer relationships, with more than half of U.S. businesses reporting increased scam and fraud ...

Warning: Romance Scammers Are Targeting US Citizens For Money Laundering

Threat actors are using romance scams to trick U.S. citizens into acting as money mules, the Wall Street Journal reports. The Journal cites the example of Garrick Stafford, a 50-year-old ...

Attackers Abuse Legitimate Infrastructure to Distribute Phishing Emails

Researchers at Cisco Talos are tracking a significant increase in phishing campaigns that abuse legitimate platforms. Attackers abused more than 25 legitimate services over the past year, ...

[Cybersecurity Awareness Month] Why Your Best Incident Reporting Tool Is Behavioral, Not Software

During an incident, the most valuable intel is from people on the ground. Security teams rely on their colleagues across the organization to report issues quickly and without trying to ...

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Phishing attacks are increasingly using legitimate calendar invites to bypass security filters, according to researchers at Netcraft. Attackers send ICS calendar invite files that plant ...

FBI Warns of Phishing Attacks Ahead of the US Midterm Elections

The U.S. FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have issued joint advisories warning of election-themed scams targeting voters and spear phishing attacks ...

Job Seekers Who Use AI for Applications Need to be on the Lookout for Scams

Researchers at Malwarebytes warn that job seekers are increasingly vulnerable to scams as AI enables them to take a “spray-and-pray” approach to job applications. Users who have automated ...

Warning: Calendly Phishing Pages Are Targeting Job Seekers

Researchers at Malwarebytes warn that a phishing campaign is using spoofed Calendly pages to trick users into handing over their Facebook and Google account credentials. The phishing ...

Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts

Researchers at Fortra are tracking a surge in phishing attacks targeting bank accounts via remote monitoring and management (RMM) tools.

Phishing Attacks Target YouTubers With Phony Sponsorships

A phishing campaign is targeting YouTubers with phony sponsorship offers, according to researchers at ESET. The emails are personalized to each target, making specific references to their ...