FL-KNOWBE4
18.1.2023 14:01:41 CET | Business Wire | Press release
KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, today announced the results of its 2022 and Q4 2022 top-clicked phishing report. The results include the top email subjects clicked in phishing tests, top attack vector types, holiday phishing email subjects and more insightful information that reveal the most popular phishing email tactics.
Phishing emails continue to be one of the most common and effective methods to maliciously impact a variety of organizations around the world – everyone is a potential victim. Cybercriminals constantly refine their strategies to outsmart end users and organizations by changing phishing email subjects to be more believable and attention grabbing. This shift in phishing tactics over time is evident in the increasing trend of cybercriminals using business-related email subjects.
Business phishing emails are lucrative and successful because of their potential to affect a user’s workday and routine. These include emails from HR, IT, managers and web services such as Google and Amazon. KnowBe4’s 2022 phishing test results reveal that for the year, nearly 50% of email subjects were HR related, while the other half were related to career development, IT and work project notifications. These types of emails bait recipients into opening them and are likely successful because they create a sense of urgency in users to act quickly, sometimes without thinking and taking the time to question the email’s legitimacy.
Additionally, this year’s phishing tests revealed the top vector for the year to be phishing links in the body of an email, which has stayed consistent for the last three consecutive quarters. The combination of these phishing tactics is clearly a working strategy for cybercriminals but detrimental to users and organizations as they can lead to cyber attacks such as business email compromise and ransomware.
Along with an increased utilization of more business-related emails and links within emails, the Q4 2022 phishing test also shares the top holiday phishing email subjects. The holiday season is one of the busiest times of year for online activities and cybercriminals count on end users having their guards down when it comes to staying alert and spotting phishing emails. Like general phishing email subjects, holiday phishing email subjects consist of emails from HR and IT, however, they are also tailored to the holiday season and the festivities that typically happen during that time of the year by mentioning holiday parties, gifts, food and more.
“Cybercriminals are smart and pay attention to what works and what does not when it comes to effective phishing emails,” said Stu Sjouwerman, CEO, KnowBe4. “This is why we see email subjects evolve and upgrade over time to keep up with end users and what they may be susceptible to. Phishing emails are a year-round threat and remain a challenge during the holiday season as well – holiday phishing emails are the one gift that no one wants to receive in their inbox. KnowBe4’s phishing test reports emphasize the importance of new-school security awareness training that educate users on the latest and most common cyber attacks and threats. A strong security culture and an educated workforce is an organization’s best defense to remain vigilant and stay safe online from cybercriminals and their attempted threats.”
To download a copy of the 2022 and the Q4 2022 KnowBe4 Phishing Infographics, visit here and here.
About KnowBe4
KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, is used by more than 54,000 organizations around the globe. Founded by IT and data security specialist Stu Sjouwerman, KnowBe4 helps organizations address the human element of security by raising awareness about ransomware, CEO fraud and other social engineering tactics through a new-school approach to awareness training on security. Kevin Mitnick, an internationally recognized cybersecurity specialist and KnowBe4’s Chief Hacking Officer, helped design the KnowBe4 training based on his well-documented social engineering tactics. Tens of thousands of organizations rely on KnowBe4 to mobilize their end users as their last line of defense.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20230118005172/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
REV Ocean Appoints Paul Baribault as CEO Ahead of 2027 Global Operations29.10.2026 15:45:00 CET | Press release
Global conservation and philanthropic leader to spearhead REV Ocean's next chapter, connecting world-class science with international collaboration and ocean protection REV Ocean has appointed Paul Baribault as Chief Executive Officer as the organization moves towards the international debut of its 195-metre research vessel in Rio de Janeiro in April 2027, alongside the UN Ocean Decade Conference. One of the world's largest privately owned research and exploration vessels, REV represents a major philanthropic investment in ocean science. With nine laboratories, advanced deep-sea exploration vehicles and dedicated collaboration facilities, it is designed to give scientists access to world-class research infrastructure and connect their discoveries with the people and institutions able to drive ocean protection. Baribault joins as REV Ocean moves from a decade of engineering and construction into international operations. His mandate will be to build the international partnerships, fundi
Holder Partners Launches Strategic Communications Practice and Appoints Ali Ponte as Director and Practice Lead29.10.2026 15:15:00 CET | Press release
The new practice connects strategic communications and stakeholder engagement with Holder Partners’ capabilities in investigations, disputes, cybersecurity, due diligence and risk advisory. Holder Partners, a multidisciplinary consulting and advisory firm, today announced the launch of its Strategic Communications practice and the appointment of Ali Ponte as Director and Practice Lead. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261027701219/en/ Ali Ponte, Director and Practice Lead of Holder Partners’ Strategic Communications practice. The practice advises leading companies and institutions, their boards, senior executives and counsel on communications, reputation and stakeholder considerations in complex matters and periods of significant change or opportunity. Each engagement is tailored to the client’s objectives and, where relevant, draws on Holder Partners’ broader advisory capabilities. Its strategic counsel, infor
Accertify Formalizes Partner Ecosystem as Fraud, Payments, and Chargebacks Converge Into a Single Risk Surface29.10.2026 15:00:00 CET | Press release
New partner program brings payment providers, orchestrators, commerce platforms, and consultancies together around the industry's largest fraud data community Accertify, a leading fraud decisioning provider whose Predictive Yes Platform helps merchants say yes to more good customers, more revenue, and more growth, today announced the launch of the Accertify Partner Program, a formalized partnership ecosystem connecting payment providers, orchestrators, commerce platforms, and consultancies to Accertify’s network-powered fraud intelligence. Partners can join through two tracks. The Referral track lets partners make a single introduction while Accertify handles the sale, implementation, and support. The Reseller track lets partners sell Accertify on their own contract and own the client relationship and margin. Partners that integrate with Accertify follow a defined certification path, so clients get a tested, supported connection from day one. Every client a partner brings joins a conso
Draslovka to Acquire ex-Natron Energy Battery IP, Completing a Vertically Integrated Western Sodium-Ion Value Chain29.10.2026 14:30:00 CET | Press release
Acquisition gives Draslovka control of former Natron Energy IP portfolio spanning sodium-ion materials, cells and complete battery systems. Deal combines acquired IP with Draslovka’s existing chemistry and European cathode-material capabilities, bringing key parts of the sodium-ion value chain together within one Western-aligned group and its partners. The IP acquisition strengthens Draslovka’s position across the emerging Western sodium-ion battery value chain. Technology targets applications where safety, high power, long cycle life and performance across a wide temperature range are critical, including data centers, grid storage, defense, industrial fleets, telecoms, rail and aviation. The acquired IP will substantively boost Draslovka’s technology offering, a portfolio of transformative and protected innovations for specific industries. Draslovka’s US-based subsidiary, COVORO MINING SOLUTIONS LLC (Covoro), the operator of one of the largest solid sodium cyanide plants in the world,
Veracode Finds First Meaningful Gain in AI Code Security Since 2025 as Average Pass Rate Hits 62%29.10.2026 14:27:00 CET | Press release
October 2026 Study: Anthropic’s Claude Opus 5.5 and OpenAI’s GPT-6-Sol Jointly Lead at a Record 73%, Breaking the Previous High of 68% Veracode, the global leader in application risk management, today announced a jump from 56 percent to 62 percent in overall AI-generated code security, alongside a drop in vulnerabilities from 44 percent to 38 percent — the most significant improvement since the GenAI Code Security Report series began in July 2025. Anthropic's Claude Opus 5.5 and OpenAI's GPT-6-Sol co-lead the rankings at 73 percent, surpassing the previous high of 68 percent set by GPT-5.5 in July 2026. “We’ve been analysing code generated by multiple LLMs for more than a year. Until now, we have not seen a marked improvement in AI code security, despite consistently near-perfect functionality,” said Chris Wysopal, Co-founder & Chief Security Evangelist at Veracode. “This is the first time since running our study that we’ve been able to report a meaningful move on the security dial. Te
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom