公开(公告)号：US12149561B2

公开(公告)日：2024-11-19

申请号：US18142858

申请日：2023-05-03

Applicant: KnowBe4, Inc.

Inventor： Alin Irimie ,  Stu Sjouwerman ,  Greg Kras ,  Eric Sites

IPC: H04L9/40 ,  G06N3/044 ,  G06N3/08

Abstract: Systems and methods of embodiments are described of a campaign controller that establishes a model for using a plurality of types of exploits based on at least results of simulated phishing communications using those exploits, and uses the model to communicate a first simulated phishing communication to one or more devices of a user where the type of exploit used for the first simulated phishing communication is selected using the model. The campaign controller applies either artificial intelligence or machine learning to the results of simulated phishing communications to establish the model. The campaign controller selects the exploit by applying either artificial intelligence or machine learning to one or more attributes of the user and/or one or more responses from the user.

公开(公告)号：US12143413B2

公开(公告)日：2024-11-12

申请号：US17897212

申请日：2022-08-28

Applicant: KnowBe4, Inc.

Inventor： Alin Irimie ,  Stu Sjouwerman ,  Greg Kras ,  Eric Sites

IPC: H04L9/40 ,  G06F16/951 ,  G06F21/56 ,  G06F30/20 ,  G06N5/02 ,  G06N20/00 ,  H04L51/212 ,  H04W12/122 ,  H04L51/23 ,  H04W12/128

Abstract: A system and method is described that sends multiple simulated phishing emails, text messages, and/or phone calls (e.g., via VoIP) varying the quantity, frequency, type, sophistication, and combination using machine learning algorithms or other forms of artificial intelligence. In some implementations, some or all messages (email, text messages, VoIP calls) in a campaign after the first simulated phishing email, text message, or call may be used to direct the user to open the first simulated phishing email or text message, or to open the latest simulated phishing email or text message. In some implementations, simulated phishing emails, text messages, or phone calls of a campaign may be intended to lure the user to perform a different requested action, such as selecting a hyperlink in an email or text message, or returning a voice call.

公开(公告)号：US12047383B2

公开(公告)日：2024-07-23

申请号：US17826566

申请日：2022-05-27

Applicant: KnowBe4, Inc.

Inventor： Greg Kras ,  Alin Irimie

IPC: H04L29/06 ,  G06F9/30 ,  G06F21/56 ,  G06F21/57 ,  G09B19/00 ,  H04L9/40

CPC classification number: H04L63/104 ,  G06F9/30029 ,  G06F21/562 ,  G06F21/577 ,  G09B19/0053 ,  H04L63/102 ,  H04L63/1433 ,  H04L63/1483 ,  G06F2221/034

Abstract: This disclosure describes embodiments of an improvement to the static group solution because all the administrator needs to do is specify the criteria they care about. Unlike static groups, where the administrator needs to keep track of the status of individual users and move them between static groups as their status changes, smart groups allows for automatic identification of the relevant users at the moment that action needs to be taken. This feature automates user management for the purposes of enrollment in either phishing and training campaigns. Because the smart group membership is determined as the group is about to be used for something, the smart group membership is always accurate and never outdated. The query that determines the smart group membership gets run at the time when you are about to do a campaign or perform some other action that needs to know the membership of the smart group.

公开(公告)号：US11930028B2

公开(公告)日：2024-03-12

申请号：US17565519

申请日：2021-12-30

Applicant: KnowBe4, Inc.

Inventor： Bret Lowry ,  Gauvin Repuspolo ,  Greg Kras

IPC: H04L9/40 ,  G06F21/56 ,  H04L51/212

CPC classification number: H04L63/1425 ,  G06F21/56 ,  H04L51/212 ,  H04L63/1441 ,  H04L63/1483 ,  G06F2221/2119

Abstract: The present disclosure describes a system that notifies users regarding specific user decisions with respect to solution phishing emails. The system notifies users when users perform specific actions with respect to the untrusted phishing emails. The system pauses execution of these actions and prompts the user to confirm whether to take the actions or to revert back to review the actions. In contrast from anti-ransomware technologies which are entirely in control, the system gives the user autonomy in deciding actions relating to untrusted phishing emails. The system interrupts execution of actions related to untrusted phishing emails in order to give users a choice on whether to proceed with actions.

公开(公告)号：US11876828B2

公开(公告)日：2024-01-16

申请号：US17953195

申请日：2022-09-26

Applicant: KnowBe4, Inc.

Inventor： Greg Kras

IPC: H04L9/40

CPC classification number: H04L63/1433 ,  H04L63/1483 ,  H04L63/14 ,  H04L63/20

Abstract: Systems and methods are described for using a template for simulated phishing campaigns based on predetermined date from a date associated with a user. The predetermined date may by an event, an anniversary or a milestone associated with employment of the user with a company. The campaign controller may identify a date associated with the user and based on the identification of the date associated with the user, the campaign controller may select one or more templates for one or more simulated phishing campaigns to be triggered by a predetermined date related to the date associated with the user.

公开(公告)号：US20230388343A1

公开(公告)日：2023-11-30

申请号：US18142858

申请日：2023-05-03

Applicant: KnowBe4, Inc.

Inventor： Alin Irimie ,  Stu Sjouwerman ,  Greg Kras ,  Eric Sites

IPC: H04L9/40 ,  G06N3/044 ,  G06N3/08

CPC classification number: H04L63/1483 ,  H04L63/1433 ,  G06N3/044 ,  G06N3/08 ,  H04L63/1425

Abstract: Systems and methods of embodiments are described of a campaign controller that establishes a model for using a plurality of types of exploits based on at least results of simulated phishing communications using those exploits, and uses the model to communicate a first simulated phishing communication to one or more devices of a user where the type of exploit used for the first simulated phishing communication is selected using the model. The campaign controller applies either artificial intelligence or machine learning to the results of simulated phishing communications to establish the model. The campaign controller selects the exploit by applying either artificial intelligence or machine learning to one or more attributes of the user and/or one or more responses from the user.

公开(公告)号：US11799909B2

公开(公告)日：2023-10-24

申请号：US17696435

申请日：2022-03-16

Applicant: KnowBe4, Inc.

Inventor： Greg Kras

IPC: H04L9/40 ,  G06F30/20 ,  G06Q10/0631

CPC classification number: H04L63/1483 ,  G06F30/20 ,  G06Q10/06314 ,  H04L63/1433

Abstract: The present disclosure describes systems and methods for using for a simulated phishing campaign, information about one or more situations of a user determined from an electronic calendar of the user, A campaign controller may identify/an electronic calendar of a user for which to direct a simulated phishing campaign, determine one or more situations of the user from information stored in the electronic calendar and select either a template from a plurality of templates or a starting action from a plurality of starting actions for the simulated phishing campaign based at least on the one or more situations of the user. The campaign controller may communicate to one or more devices of the user a simulated phishing communication based at least on the respective template or starting action.

公开(公告)号：US11632387B2

公开(公告)日：2023-04-18

申请号：US17004950

申请日：2020-08-27

Applicant: KnowBe4, Inc.

Inventor： Alin Irimie ,  Stu Sjouwerman ,  Greg Kras ,  Eric Sites

IPC: H04L9/40 ,  G06N5/02 ,  G06N20/00 ,  G06F16/951 ,  G06F30/20 ,  H04W12/122 ,  H04L51/212 ,  H04W12/128 ,  H04L51/23

Abstract: The present disclosure describes systems and methods for using a template for a simulated phishing campaign, A database includes a plurality of templates for simulated phishing campaigns, each template of the plurality of templates identifying a list of a plurality of types of simulated phishing communications and at least a portion of content for the simulated phishing communications. A campaign controller selects a template from the plurality of templates for a simulated phishing campaign directed to a user of a plurality of users; and communicates, to one or more devices of the user a first type of simulated phishing communication of the plurality of types of simulated phishing communications with at least the portion of content identified by the template.

公开(公告)号：US20230070202A1

公开(公告)日：2023-03-09

申请号：US17986856

申请日：2022-11-14

Applicant: KnowBe4, Inc.

Inventor： Greg Kras ,  Adam Alessandrini

IPC: G06F21/55 ,  H04L51/08 ,  H04L9/40 ,  G09B19/00

Abstract: Systems and methods are described for providing customized message content to be displayed to a user of an email client, responsive to the user selecting, via a plug-in or agent of the email client, to report an email as a potential phishing email. In examples, the user may be an employee of an organization and the systems and methods may facilitate a determination by the plug-in or agent of the email client that the reported email is one that does not pose a security risk, such as a simulated phishing email sent by the organization itself, or an email sent from a trusted partner of the organization. The systems and methods may facilitate a customization of the message content that is displayed to the user. In examples, the customized message content may be included or specified within one or more SMTP extension headers of an SMTP email.

公开(公告)号：US11601470B2

公开(公告)日：2023-03-07

申请号：US17379086

申请日：2021-07-19

Applicant: KnowBe4, Inc.

Inventor： Alin Irimie ,  Greg Kras ,  David Austin ,  Benjamin Dalton

IPC: H04L9/40 ,  G06F40/186 ,  H04L51/18 ,  H04L51/52

Abstract: Systems and methods are provided for performing simulated phishing attacks using social engineering indicators. One or more failure indicators can be configured in a phishing email template, and each failure indicator can be assigned a description about that failure indicator through use of a markup tag. The phishing email template containing the markup tags corresponding to the failure indicators can be stored and can be used to generate a simulated phishing email in which the one or more markup tags are removed.