Issue Alert: KnowBe4 False Positives
Posted by , 5 days ago
Issue:
Employees have reported that after reporting a simulated phishing message, the receive a message that they successfully identified the phishing message, but soon after receive a message stating they failed the phishing simulation.
Cause:
The cause of this is likely do to a change in the way messages are distributed and how the system recognizes phishing simulations. Simulations are now emailed to employees, which will trigger advanced protection functions and cause links in messages to be inspected by our security services. When this occurs, it generates a false positive and assigns the employee training.
Solution:
HPG IT always reviews and removes false positives during each phishing simulation. There are generally 3-5 false positives each simulation campaign. This campaign has generated more than usual because of the changes that were made to how messages deliver to employee's mailboxes. We will still review and remove any false positives and the affected employees will not be required to complete training.
If you believe you experienced a case of the false positive, be patient, we will review them over the course of the campaign, and by the end of the campaign will have all false positives addressed. If you still have training assigned, and believe you did not fail the phishing simulation, please submit a ticket after 4/15/2025.