Skip to main content

KnowBe4 Q3 2025 Phishing Simulation Roundup Highlights

Source Decision Insights Record Published November 6, 2025 Companies 2
Human View Machine View

2 companies named across 1 category, one of 5 articles referencing Knowbe4. Previous coverage: Darktrace appoints Suman Raju as CFO and Hein Hellemons as CRO (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
How to start
Adoption curve
Early Majority

Our classification, not the publisher's statement. Best suited for, not only for.

The Q3 2025 Phishing Simulation Roundup from KnowBe4 indicated that simulated phishing emails mimicking colleagues and internal topics garnered the highest interaction rates among employees. The research highlighted an ongoing issue with employee susceptibility to phishing attempts leveraging familiarity.

Data for the roundup, collected from the KnowBe4 platform between July 1 and September 30, 2025, revealed that 90% of the most-clicked subject lines referenced internal topics. Human Resources-related emails were particularly prevalent, featuring in 45% of these interactions. Personalization strategies that included the company name significantly increased engagement.

Branded content was a focal point, with 70% of simulated phishing landing page interactions involving recognizable brands. Microsoft was the most common brand featured, comprising 25% of interactions. The report also noted that 82% of the top-clicked links in phishing simulations were based on internal themes, with 66% employing domain spoofing techniques.

Attachment analysis showed that PDFs made up 56% of the most opened attachments in phishing scenarios, followed by Word documents at 25% and Hypertext Markup Language (HTML) files at 19%. Erich Kron, CISO advisor at KnowBe4, emphasized that messages appearing routine, particularly from HR and IT, tend to be less scrutinized by users, suggesting a need for improved awareness and training to bolster cybersecurity resilience.

Press release, provided by Cision on behalf of Knowbe4. The publisher has since removed that page — its address was https://www.prnewswire.com/news-releases/knowbe4-research-reveals-personalized-phishing-emails-using-the-company-name-dominate-302597747.HTML.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/knowbe4-q3-2025-phishing-simulation-roundup-highlights/",
        "name": "KnowBe4 Q3 2025 Phishing Simulation Roundup Highlights",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/knowbe4-q3-2025-phishing-simulation-roundup-highlights/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/knowbe4/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/knowbe4/",
      "name": "Knowbe4"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-23T13:39:10-06:00",
    "datePublished": "2025-11-06T05:05:58-07:00",
    "description": "KnowBe4's Q3 2025 phishing report highlights persistent vulnerabilities in organizations from familiar internal topics.",
    "headline": "KnowBe4 Q3 2025 Phishing Simulation Roundup Highlights",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "Cision"
      },
      "url": "https://www.prnewswire.com/news-releases/knowbe4-research-reveals-personalized-phishing-emails-using-the-company-name-dominate-302597747.HTML"
    },
    "keywords": [
      "Phishing"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/knowbe4-q3-2025-phishing-simulation-roundup-highlights/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/knowbe4/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/knowbe4/",
        "name": "Knowbe4"
      },
      {
        "@id": "https://decisioninsights.ai/registry/microsoft/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/microsoft/",
        "name": "Microsoft"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages