Fraud & Scams

From Awareness to Digital Workforce Security

Security must evolve from a static training program into dynamic, AI-powered human and AI risk orchestration embedded across the o…

Your KnowBe4 Fresh Content Updates from June 2026

Fran Roberts - Studios General Manager, KnowBe4 I am thrilled to be writing my first message to you as KnowBe4's new Studios…

This new Windows malware can take over your PC and wipe it clean

GigaWiper is a remote access Trojan that can spy on victims and permanently wipe their systems in three different ways.

Threat Actor Uses Phishing to Breach Orgs for Ransomware Gangs

An initial access broker associated with the Payouts King ransomware group is using Microsoft Teams phishing to deploy a malicious…

How mule betting scams recruit ordinary people

Easy-money offers to open a gambling account could make you part of a money laundering operation. Here's how to spot a mule bettin…

Two Chrome updates in two days fix critical vulnerabilities

Chrome updates are arriving within days of each other. Learn how to update Chrome and check if you're running the latest version.

Invoice Phishing Attacks Are Abusing the Shop App

Threat actors are abusing Shop, a legitimate app developed by Shopify, to launch phishing attacks, according to researchers at Gen…

Phishing Campaign Impersonates Interpol to Deliver Ransomware

A phishing campaign is targeting small businesses across Europe, Asia, the Middle East, and the United States with emails that imp…

How World Cup crypto prediction sites take your money

Crypto prediction games promise easy wins, but some are little more than token sales or outright scams. Here's what to look for.

6.9 million driver’s license numbers stolen from AssuranceAmerica

Millions of AssuranceAmerica customers are being notified after attackers accessed driver's license numbers and other personal inf…

Prompt Injection and the Rise of Agentic Risk

Boxers will often say, the punches that hurt the most aren’t the ones which are thrown with the most force, but the ones they didn…

RentGrow to Pay $2.25 Million to Settle FTC Allegations the Company Violated the Fair Credit Reporting Act and FTC Act

RentGrow, a provider of consumer reports for tenant screening, will be required to pay $2.25 million to settle Federal Trade Commi…

Microsoft fixes RoguePlanet zero-day in Defender

The RoguePlanet zero-day is now fixed in Microsoft Defender. Here's how to make sure your system is protected.

Turn off this Meta setting before someone generates AI images of you

Meta's new Muse Image tool lets anyone generate AI images of you from your public Insta profile. You won't be notified, and it's o…

Hyper-Targeted Social Engineering Needs Real-Time Video Response

There’s an important metric that can tell you exactly how vulnerable your high-risk employees and departments are to the next gene…

Your next car could be watching your face

Driver-monitoring technology is becoming mandatory in new cars, but privacy experts warn it could create new risks alongside the s…

Your Email is Protected. Is Your Teams Chat?

For years, security teams have poured resources into locking down the inbox, and for good reason. Email has always been the front…

How the Reddit and Discord false report scam steals accounts

Scammers are tricking Reddit and Discord users into handing over login codes by claiming they were involved in a false report.

Fake Netflix, Coca-Cola, and FIFA job scams target marketers

A fake recruiter phishing campaign uses trusted brands, nested redirects, and fake Google prompts to steal accounts.

CyberheistNews Vol 16 #27 [HOW TO] Your Cybersecurity Starts at Home on World Social Media Day

2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

Every year, KnowBe4 analyzes millions of simulated phishing tests to measure one thing: how likely is your workforce to fall for a…

FTC Sends More Than $2.7 Million to Consumers Harmed by Handy Technologies

Image The Federal Trade Commission is sending checks totaling more than $2.7 million to eligible consumer…

Claude Code’s hidden tracker was an “experiment,” says Anthropic

Anthropic's hidden Claude Code tracker has raised new questions about prompt steganography and developer trust.

Static DLP Is Leaving You in the Dark: Why It’s Time for Intelligent, Self-Serve Outbound DLP and Misdirected Content Analysis

When we think about email security, our minds almost always jump to the inbound threats: the sophisticated phishing lures, the AI-…

Scammers are using AI to sell impossible flowers

AI-generated flower scams are blooming online, with scammers using fake images to sell seeds for plants that don't exist, like the…

How to tell if an image is AI-generated

Scammers are using AI-generated images to make fake stories more convincing. Here's how to separate real from fake.

Choose your WhatsApp username carefully

WhatsApp is introducing usernames to help protect your phone number. Just make sure you don't undermine that privacy by choosing t…

FTC Warns Companies Making Questionable ‘Made in the USA’ Claims

The Federal Trade Commission today issued warning letters to seven companies that appear to have misrepresented certain products a…

NetNut botnet takes a hit. Don’t be part of the next one.

Google, the FBI, and other partners have disrupted a residential proxy network built on millions of hijacked devices and used by c…

A week in security (June 29 – July 5)

A list of topics we covered in the week of June 29 to July 5 of 2026