KnowBe4 Blog KnowBe4’s blog keeps you informed about the latest in human and agent security including social and prompt engineering, ransomware and phishing attacks.
- Warning: Replying to a “Wrong Number” Text Marks You as a Target for Scams
by KnowBe4 Team on August 28, 2026 at 8:00 pmAttackers are using “wrong-number” texts to identify potential targets for scams, according to researchers at Malwarebytes. These texts appear to be harmless messages meant for another person, such as “Are we still on for dinner tomorrow?” or “Where’s the PowerPoint?” Recipients often try to be helpful by replying to let the person know they’ve got the wrong number. This reply, however, informs the threat actor that the phone number is active and marks it for future scams.
- The .vu Surge: How Threat Actors Are Exploiting Vanuatu’s Domain Extension
by KnowBe4 Threat Lab on August 28, 2026 at 5:30 pmLead Analysts: Prabhakaran Ravichandhiran and Jeewan Singh Jalal
- New Phishing Kit Gives Threat Actors Live View Into Attacks
by KnowBe4 Team on August 28, 2026 at 1:00 pmA new phishing platform called “JWR” gives attackers real-time control over social engineering attacks, according to researchers at Cisco Talos. The kit livestreams the phishing page to the attacker as the victim is entering information, allowing the attacker to steer the victim’s experience and maximize the damage.
- Voice Phishing Attacks Target Hedge Fund Employeesby KnowBe4 Team on August 27, 2026 at 9:00 pm
Google’s Threat Intelligence Group (GTIG) is tracking a voice phishing (vishing) campaign that’s targeting hedge funds and financial firms. The researchers attribute the attacks to “UNC6671,” an extortion group formerly known as “BlackFile.” The attackers pose as IT staff informing employees of urgent, mandatory migrations.
- Warning: Malicious AI Tools Are Spreading in the Criminal Underground
by KnowBe4 Team on August 27, 2026 at 1:00 pmCriminals are now selling malicious AI tools for use in cyberattacks, according to researchers at Trellix. These tools dramatically lower the barrier for unskilled crooks to launch sophisticated attacks.
- Attackers Use Vishing Attacks to Distribute New Android Malware
by KnowBe4 Team on August 26, 2026 at 1:00 pmAttackers are distributing a new Android malware called “WindRelay” via phone-based social engineering attacks, according to researchers at Group-IB. The attackers call the victims, impersonating bank employees and instruct them to install a malicious app. In one instance observed by Group-IB, the scammers carried out the entire attack in just thirteen minutes.
- Report: Phishing Remains the Primary Initial Access Vector
by KnowBe4 Team on August 25, 2026 at 4:00 pmPhishing is still the top initial access vector, accounting for more than half of cyberattacks observed during Q2 2026, according to a new report from Cisco Talos.
- CyberheistNews Vol 16 #34 Microsoft Observed 7.6 Billion Phishing Emails in Q2 2026
by KnowBe4 Team on August 25, 2026 at 1:30 pm - Report: AI Chatbots Are More Effective at Building Trust Than Human Scammers
by KnowBe4 Team on August 24, 2026 at 8:00 pmA study has found that AI chatbots can be more effective at social engineering than human scammers, WIRED reports. The researchers looked at a form of romance scam commonly known as “pig butchering,” in which scammers spend weeks or months building a relationship with the victim before tricking them into sending money for a phony investment scheme.
- Human Error Remains at the Core of AI-Enabled Social Engineering
by KnowBe4 Team on August 24, 2026 at 1:00 pmAI is making social engineering attacks significantly more effective, according to a new report from cyber insurance firm Resilience. These attacks were behind more than 85% of losses in the first half of 2026, compared to less than 20% during H1 2024.
