Monthly Archives: July 2024

The First Half of 2024 Results in More Than 1 Billion Data Breach Victims

New data shows that cyber attacks have resulted in double the number of data breaches in 2024 than throughout all of 2023.

Half of Travel-Themed Spam Emails Are Scams

Researchers at Bitdefender have found that half of all travel-themed spam emails contain scams.

KnowBe4 Named a Leader in the Summer 2024 G2 Grid Report for Security Awareness Training

We are thrilled to announce that KnowBe4 has been named a leader in the latest G2 Grid Report that compares security awareness training (SAT) vendors based on user reviews, customer satisfaction, popularity and market presence.

Dark Angels Ransomware Group Scores Record-Breaking $75 Million Payday

In the ever-evolving world of cybercrime, ransomware attacks continue to be a lucrative business for cybercriminals.

New Phishing Kit Uses Voice Call Generator to Impersonate Spanish Banks

A new cybercriminal group is selling “a sophisticated AI-powered phishing-as-a-service platform” that targets 36 Spanish banks, according to researchers at Group-IB.

Organizations Prepare for More Evolved AI-Based Cyber Attacks as Deepfakes Become Top Concern

New data on how the threat of AI in cyber crime is being seen as a growing risk provides insight into how organizations are shifting from reaction to prevention.

CyberheistNews Vol 14 #31 How The Whole World Now Knows About Fake North Korean IT Workers

The 2024 Olympics Offers Plenty of Opportunity For Online Scammers

Fortinet’s Threat Intelligence Report covering the Paris Olympics provides some very detailed coverage of how threat actors are taking advantage of individuals and organizations who have their attention pointing directly toward Paris this summer.

IoT: Internet of Threats?

The Internet of Things (IoT) has slowly but surely weaved its way into our homes and places of work. From smart homes to industrial control systems, IoT has brought convenience and efficiency to our lives. However, with this increased connectivity … Read More

Scammers Exploit Interest in Generative AI Tools

Researchers at Palo Alto Networks’s Unit 42 are tracking phishing attacks exploiting interest in generative AI tools. The researchers observed spikes in suspicious domain registrations over the past year that correlated with current news.

Roger’s Hacking Stories

In this post, I’ll share two fascinating hacking stories I’ve experienced: one involving a sophisticated scam that targeted a major U.S. Fortune 500 conglomerate, and another detailing the implementation of honeypots by a renowned U.S. think tank that went wrong. 

Nearly All Ransomware Attacks Now Include Exfiltration of Data…But Not All Are Notified

Organizations are falling victim to ransomware attacks where data is stolen, but the victim isn’t being told about it. I have a theory as to why this is happening.

QR Code Phishing is Still on the Rise

Organizations need to be aware of the threat posed by QR code phishing (quishing), according to researchers at Trend Micro.

How The Whole World Now Knows About Fake North Korean IT Workers

Wow. Last week’s blog post went viral, hitting major media outlets and receiving over 100K hits in just a few days. Most responses, coming from all over the world, praised our transparency and commitment to doing what’s right. However, some … Read More

New Phishing Scam Leverages Chat To Add Credibility And Ensure Success

A new phishing scam is leveraging trusted aspects of ecommerce to make their scams look legitimate.

Your KnowBe4 Fresh Content Updates from July 2024

Check out the 26 new pieces of training content added in July, alongside the always fresh content update highlights, events and new features.

Russian Super-Threat Group Fin7 Comes Back from the Dead

Declared “dead” by the U.S. Attorney’s Office in 2023, the Russian cyber crime group Fin7 is impersonating some of the top global brands.

Phishing Campaigns Continue To Exploit CrowdStrike Outage

As expected, threat actors are taking advantage of the global IT outage caused by a faulty CrowdStrike update last Friday, SC Media reports.

Your KnowBe4 Compliance Plus Fresh Content Updates from July 2024

Check out the July updates in Compliance Plus so you can stay on top of featured compliance training content.

North Korean Fake IT Worker FAQ

Frequently Asked Questions About KnowBe4’s Fake IT Worker Blog   July 23, 2024, I wrote a blog post about how KnowBe4 inadvertently hired a skillful North Korean IT worker who used the stolen identity of a US citizen. He participated … Read More