Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Technical Sophistication Behind the "Free" Gift Scam: Evading Detection

Below is an example of a sophisticated survey scam phishing email that KnowBe4’s Threat Lab team has been monitoring as discussed in “The Hidden Cost of "Free" Gifts: How Survey Scams Are Evolving to Steal Financial Data”. As discussed in our previous blog, the human element is a critical part of the fake survey scam. However, the campaign's success is largely due to its advanced technical infrastructure.

8 Fraud and Risk Gaps Private Lenders Miss

Would it surprise you to learn that fraud is common in private lending? Probably not if you're in this business. But if you're not, here's what a recent LexisNexis report has revealed: not only is fraud common, but U.S. financial services firms lose $4.41 in costs for every $1 of fraud. This, by the way, is a 28% increase compared to 2022.

The MemcycoFM Show: Episode 13 - How 5 of the Biggest Retail ATO Attacks Could Have Been Stopped

Retailers have become prime targets for account takeover. Loyalty balances, stored cards, and digital wallets represent liquid assets, often guarded by weaker controls than financial accounts. Attackers exploit credential reuse, phishing infrastructure, and automation to scale these intrusions. Reported retail ATO cases in the UK rose 96% year over year (Action Fraud, 2023). The following five breaches illustrate how large brands across loyalty, e-commerce, and digital wallets were compromised, and how real-time, in-session defenses could have altered the trajectory.

The Human Firewall: Building a Culture of Fraud Resilience

Cybersecurity tools are only as strong as the humans who use them. Training, culture, and awareness shape how individuals interact with those systems and whether they succeed. This is especially true when it comes to fraud prevention. While firewalls and encryption protocols can block many external threats, they can’t stop an employee from clicking on a fraudulent invoice, wiring money to a spoofed account, or falling for a phishing scam.

From Human Resources to Human Risk: Why HR is the Perfect Department for Cybercriminals to Impersonate

We all trust HR - or at least we do when we think they’re emailing us! Data from KnowBe4’s HRM+ platform reveals that phishing simulations with internal subject lines dominate the list of most-clicked templates in 2025. Out of the top 10 templates people interacted with between May 1 - June 30, 2025, an incredible 98.4% had subject lines relating to internal topics - with HR mentioned in 45.2%.

Executive Deepfake Defense Strategies: 7 Proven Tactics to Stop CEO Fraud

Deepfake attacks targeting executives are no longer a sci-fi scenario—they’re a real, escalating threat. In 2024 alone, over 105,000 deepfake incidents were reported in the U.S., contributing to $200 million in financial losses in Q1 of 2025. Scammers deepfake voices and videos of CEOs or CFOs to coax employees into sending money or exposing sensitive data. The sophistication and accessibility of this technology demand layered defenses—both human-focused and tech-driven.

The Human Firewall: Building a Culture of Fraud Resilience

Cybersecurity tools are only as strong as the humans who use them. Training, culture, and awareness shape how individuals interact with those systems and whether they succeed. This is especially true when it comes to fraud prevention. While firewalls and encryption protocols can block many external threats, they can’t stop an employee from clicking on a fraudulent invoice, wiring money to a spoofed account, or falling for a phishing scam.