Monthly Archives: September 2022

[HEADS UP] Online Scams on Queen Elizabeth’s Death is Here

The Sun just reported that experts are sending a warning about online scams in relation to Queen Elizabeth’s passing.

CyberheistNews Vol 12 #37 [Eye Opener] The New Evil Proxy Phishing-as-a-Service Platform Beats MFA

Scammer Continues Phishing From Prison

Dutch authorities have announced that an imprisoned scammer was running a phishing operation from his jail cell, Cybernews reports. The crook used four mobile phones to post malicious ads on Marktplaats, a popular Dutch classifieds site. The Northern Netherlands District … Read More

Ransomware Gangs Improve Attack Speed and Evade Detection with New “Intermittent Encryption” Tactic

As ransomware gangs look for new ways to improve their execution, this relatively new encryption tactic has been gaining popularity in multiple ransomware families.

Striving for 100% Completion Rates: Getting Compliance on Your Compliance Training

You might think 100% completion rates on any employee training sounds too good to be true. But, getting compliance on your compliance training is possible!

Report: 80% of Phishing Attacks Leverage Legitimate Web Infrastructure and Services

Threat actors are taking advantage of every free tool and service they can to improve their changes of successfully fooling security solutions, with compromised websites taking the lead.

Gaming-Related Phishing Trends

Researchers at Kaspersky have found that the vast majority of gaming-related malware lures are targeted at Minecraft players. Roblox came in at a distant second, and the researchers note that both of these games are frequently played by children, “who … Read More

(ISC)² and Venafi Explore The Strange New World of Machine Identity Management

Earlier this year, (ISC)² hosted a webinar about a new kind of challenge facing cybersecurity: machine identity management. Although this security component has only received sizable attention over the last couple of years, Gartner ranked it among the top eight … Read More

Latest Cyberthreats and Advisories – September 9, 2022

A ransomware onslaught, a massive IRS data leak and cyberattacks on public transit and school systems…. Here are the latest threats and advisories for the week of September 9, 2022. Threat Advisories and Alerts Ransomware Group Vice Society Preys on … Read More

Singapore: Top Ten Scams in the First Half of 2022 Cost Over $227 Million, Scam Frequency Rises by 94%

Queries of reported cases to Singapore Police reveal a rise in scam costs by 59% as phishing cases double and job-related scams increase 7x from the first half of 2021.

PwC: More Frequent Cyber Attacks Tops the List of Business Risk for Executives

New data from PwC provides insight into what aspects of the business are executives focused on, worried about, and seeing as future challenges as they look to manage business risk.

Request a Demo of KnowBe4’s PhishER Platform and Get Your Free Hat!

Phishing is still the No. 1 attack vector. Your users are exposed to malicious email daily. They can now report those to your Incident Response (IR) team. But how to best manage your user-reported messages?

[New Training] Give Your Employees the Know-How to Have the Tough Conversations with New Compliance Plus Training

We’re thrilled to announce a brand new microlearning, TV-like production quality series of compliance content now available in the Compliance Plus library.

New Phishing-as-a-Service Platform

Researchers at Resecurity have discovered a new Phishing-as-a-Service (PhaaS) platform called “EvilProxy” that’s being offered on the dark web. EvilProxy is designed to target accounts on a variety of platforms, including Apple, Facebook, GoDaddy, GitHub, Google, Dropbox, Instagram, Microsoft, Twitter, … Read More

Assigning Tasks to Less-Experienced Cybersecurity Hires Depends on Company Needs

Depending on the organization, entry- and junior-level cybersecurity professionals are assigned an assorted mix of tasks, according to new (ISC)² research. Junior-level employees typically are trusted to handle most tasks, the research shows. The findings come from a survey of … Read More

Spear Phishing Campaign Targets Financial Institutions in African Countries

Researchers at Check Point have discovered a spear phishing campaign dubbed “DangerousSavanna” that’s targeting financial entities in at least five African countries.

Combatting Rogue URL Tricks: Quickly Identify and Investigate the Latest Phishing Attacks

Everyone knows you shouldn’t click phishy links. But are your end users prepared to quickly identify the trickiest tactics bad actors use before it’s too late? Probably not.

Building a Security Culture With Behavior Design

Anyone who has run security awareness programs for a while knows that changing human behaviour is not an easy task. And that sometimes the problem with awareness is that “awareness” alone does not automatically result in secure behavior.

CyberheistNews Vol 12 #36 [Eye Opener] So, Your MFA Is Phishable, What to Do Next?

1-Time Passcodes Are a Corporate Liability. Department of Homeland Security Fraud Warning. Email not displaying? | View Knowbe4 Blog CyberheistNews Vol 12 #36  |  September 7th, 2022 [Eye Opener] So, Your MFA Is Phishable, What to Do Next? We’ve written … Read More

Register for KB4-CON EMEA 2022 Now!

Once again we are hosting a special KB4-CON Virtual Summit for all of our customers and partners in Europe, the Middle East, and Africa with content tailored to your region! Last year’s inaugural event was a huge success with 94% … Read More