We currently use Knowbe4 for phish testing and have been for some time now, maybe a few years. It's been great with no real complaints. Recently within the last month we started to get an almost 100% click rate and the clicks are from IP's outside of the US mostly. So they aren't end user clicks. I thought it was something our Barracuda spam filter was doing however the clicks can sometimes be delayed by 5 days after delivery. Also we've whitelisted everywhere we can to try and work around spam filter. The only real change was the implementation of the Barracuda Cloud Email Archiver. I think that the archiver is clicking these links but have been unable to prove it. Barracuda support isn't getting me very far as they pretty much instantly deny that it's happening.
This will be a shot in the dark but does anyone else use the Barracuda...