KnowBe4 Threat Lab

KnowBe4 Threat Lab is a research and analysis endeavor by seasoned cybersecurity professionals that discovers and investigates the latest phishing techniques and develops strategies to preemptively combat these threats. KnowBe4 Threat Lab specializes in researching and mitigating email threats and phishing attacks, using a combination of expert analysis and crowdsourced intelligence.

Capital One Customers Targeted By Credential Harvesting Phishing Campaign

May 29, 2025 4:25:31 PM By KnowBe4 Threat Lab

The KnowBe4 Threat Lab has identified an active phishing campaign impersonating Capital One.

Threat Actors Are Using AI-Generated Audio to Impersonate U.S. Officials

May 27, 2025 4:04:49 PM By KnowBe4 Threat Lab

The FBI is warning that threat actors are impersonating senior US officials in phishing attacks designed to compromise users’ accounts.

Impersonating Meta, Powered by AppSheet: A Rising Phishing Campaign Exploits Trusted Platforms to Evade Detection

May 23, 2025 8:00:00 AM By KnowBe4 Threat Lab

Since March 2025, the KnowBe4 Threat Labs team has observed a surge in phishing attacks that exploit Google’s AppSheet platform to launch a highly targeted, sophisticated campaign ...

Cybercriminals Use Telegram Bots to Exfiltrate Data In Phishing Kit Campaign

May 12, 2025 4:02:03 PM By KnowBe4 Threat Lab

KnowBe4 ThreatLabs has identified and analyzed a sophisticated cross-platform phishing campaign that utilizes Telegram as its primary exfiltration channel. The campaign uses a combination ...

The Continued Abuse of Legitimate Domains: A Spike in the Exploitation of Google Drive to Send Phishing Attacks

Apr 17, 2025 1:36:59 PM By KnowBe4 Threat Lab

First QuickBooks, then Microsoft, and now Google—will the hijacking of legitimate third-party platform communications stop escalating in 2025? Our Threat Labs researchers predict the ...

Beware the Tax Trap: Seasonal Urgency Drives a Spike in Tax-Related Phishing Scams

Apr 10, 2025 3:05:03 PM By KnowBe4 Threat Lab

Cybercriminals are quick to exploit seasonal events — and tax season is no exception. It’s a yearly honeypot for cybercriminals, who take advantage of heightened stress, tight deadlines, ...

Surge in Phishing Attacks Hijacking Legitimate Microsoft Communications

Mar 27, 2025 9:42:41 AM By KnowBe4 Threat Lab

A KnowBe4 Threat Lab Publication Authors: By James Dyer, Threat Intelligence Lead at KnowBe4 and Lucy Gee, Cybersecurity Threat Researcher at KnowBe4 On March 3, 2025, the KnowBe4 Threat ...

98% Spike in Phishing Campaigns Leveraging Russian (.ru) Domains

Mar 14, 2025 10:05:36 AM By KnowBe4 Threat Lab

A KnowBe4 Threat Lab publication Authors: Martin Kraemer, Jeewan Singh Jalal, Anand Bodke, and James Dyer EXECUTIVE SUMMARY: We observed a 98% rise in phishing campaigns hosted on Russian ...

245% Increase in SVG Files Used to Obfuscate Phishing Payloads

Mar 12, 2025 9:11:12 AM By KnowBe4 Threat Lab

A KnowBe4 Threat Labs Publication Authors: James Dyer and Cameron Sweeney The KnowBe4 Threat Research team has observed a sustained increase in the use of Scalable Vector Graphics (SVG) ...

Invoice or Impersonation? 36.5% Spike in Phishing Attacks Leveraging QuickBooks’ Legitimate Domain in 2025

Mar 7, 2025 9:13:54 AM By KnowBe4 Threat Lab

A KnowBe4 Threat Lab Publication Authors: Martin Kraemer, James Dyer, and Lucy Gee Much like sending a phishing email from a compromised account, cybercriminals can boost the ...

Security Awareness Training Blog

View Topics

KnowBe4 Threat Lab

Recent Posts