Security Awareness Blog
KnowBe4 is your platform for new-school security awareness training. We help you keep your users on their toes with security top of mind. It provides on-demand, interactive, engaging training through the browser combined with unlimited simulated social engineering attacks through email, phone and text.

Below are the most recent bulletins with great tips and information on keeping yourselves safe online, at work and at home:


Recent Posts
You may log in to your email account with a password, but that does not make the transmission of email secure. When an email is sent, it travels across a series of networks and servers to reach the recipient, often in human-readable text. During that time, it’s possible for hackers to intercept it without detection. Ask yourself: would I send this information via U.S. Mail visible in a see-through envelope?

Besides the transmission part, a copy of email messages is typically stored on your computer, your server, likely your server’s backup server (physical or in the cloud), the recipient’s computer, their server, their server’s backup, you get the idea. Hackers can be patient. They’ve been known to enter a network through a vulnerability and remain in the shadows for weeks, months, or years. Even if you believe your network is sufficiently protected, you cannot control the quality and effectiveness of the recipient’s security measures.

Things You Should Never Send


1. Social Security number. This is the skeleton key to your financial life. It can be used to open accounts, steal tax refunds and commit many other kinds of fraud.

2. Your credit card information. There is too much malware out there for this to be a safe practice. Don’t send this information via email or any other electronic means that is not secure (look for https:// and the Padlock on websites before hitting submit).

3. A copy of your driver’s license. Remember, fraudsters are not big on in-person transactions, but they are very good at talking their way around security protocols. If they have your Social Security number already (this can often be found online through shady websites), and they have enough other pieces of your personal information to convince you they are an official organization, they can dupe you into sending your photo ID — or steal it from someplace you do business — they can do a lot of damage.

4. Your PIN codes or passwords. These should never be shared, period, but if you are sharing that information in a pinch to someone close to you, do it on the phone . Malware is too prevalent to risk communicating that information electronically.

While all of this may sound like common sense, the myriad mistakes people make on a daily basis is beyond the ken of understanding. The key to staying safe is staying vigilant. Always practice the Three Ms: Minimize your exposure, monitor your accounts and manage the damage the minute you discover a problem.

While there is no preventing identity-related crime, you can avoid becoming an unwitting volunteer.
Posted by rco  On Jun 26, 2019 at 3:41 PM
  
Below is a copy of an email that was in quarantine this morning. These types of emails have been going around the Internet lately. Hopefully none of them will get through but wanted to make you aware just in case you get one. The eFax logo and the trademark at the bottom are real but if you look at the from address, the country code (PW) is for Palau. Spammers have been using the (.PW) country code a lot lately. The phone number area code (939) is for Puerto Rico. Both are red flags that this is not a real eFax. If you happen to receive anything similar, let IT know so we can try and filter them.

efax


Posted by rco  On Jun 13, 2019 at 2:44 PM