KnowBe4

KnowBe4, a security vendor, went through a security incident involving a North Korean individual posing as a legitimate hire. The suspect, under a stolen identity, attempted to inject malware into the company's system using a Raspberry Pi. Fortunately, no illegal access was gained, and no data was compromised, thanks to KnowBe4's vigilant Security Operations Center and restricted access for new hires. This incident serves as a notable example of the complexity of insider threats and the potential for nation-state actors to infiltrate organizations.

Source: https://www.wired.com/story/north-korean-hacker-hired-ecurity-company-malware/

TPRM report: https://scoringcyber.rankiteo.com/company/knowbe4

"id": "kno000072924",
"linkid": "knowbe4",
"type": "Cyber Attack",
"date": "7/2024",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Cybersecurity',
                        'name': 'KnowBe4',
                        'type': 'Security Vendor'}],
 'attack_vector': ['Physical Intrusion', 'Malware Injection'],
 'description': 'KnowBe4, a security vendor, experienced a security incident '
                'involving a North Korean individual posing as a legitimate '
                'hire. The suspect, using a stolen identity, attempted to '
                "inject malware into the company's system using a Raspberry "
                'Pi. No illegal access was gained, and no data was '
                "compromised, due to the vigilance of KnowBe4's Security "
                'Operations Center and restricted access for new hires.',
 'impact': {'data_compromised': 'None'},
 'initial_access_broker': {'entry_point': 'Physical Access'},
 'lessons_learned': 'The incident highlights the complexity of insider threats '
                    'and the potential for nation-state actors to infiltrate '
                    'organizations.',
 'motivation': 'Unauthorized Access',
 'response': {'containment_measures': 'Vigilant Security Operations Center'},
 'threat_actor': 'North Korean Individual',
 'title': 'Insider Threat Involving North Korean Actor at KnowBe4',
 'type': 'Insider Threat',
 'vulnerability_exploited': 'Insider Access'}