Connect with us

Hi, what are you looking for?

HEADLINES

Phishing attacks on employees increased in 70% of organizations during pandemic – Sophos

The vast majority (70%) of all IT teams said the number of phishing emails hitting their employees increased during 2020. This rose to 82% of IT teams in organizations that had been struck by ransomware during the year.

Photo by Jon Moore from Unsplash.com

Sophos published “Phishing Insights, 2021,” which looks at the experience and understanding of phishing in organizations around the world during 2020. 

The results show that phishing attacks targeting organizations ramped up considerably during the pandemic, as millions of home-working employees became a prime target for adversaries.

The vast majority (70%) of all IT teams said the number of phishing emails hitting their employees increased during 2020. This rose to 82% of IT teams in organizations that had been struck by ransomware during the year.

Other highlight findings from the research include:

Advertisement. Scroll to continue reading.
  1. IT professionals can’t agree on a single definition of phishing. The most common understanding of phishing, selected by 57% of respondents, is “emails that falsely claim to be from a legitimate organization, usually combined with a threat or request for information.” Forty-six percent consider Business Email Compromise (BEC) attacks to be phishing, and more than one-third (36%) think threadjacking (when attackers insert themselves into a legitimate email thread as part of an attack) is phishing.
  2. Most (90%) organizations run cybersecurity awareness programs to address phishing. However, in the light of the survey results, phishing awareness and education programs need to consider the wide range of perceived phishing definitions and include training for non-technical employees that explain the different facets of phishing and email attacks in general.

Chester Wisniewski, principal research scientist at Sophos, said: “Phishing has been around for over 25 years and remains an effective cyberattack technique. One of the reasons for its success is its ability to continuously evolve and diversify, tailoring attacks to topical issues or concerns, such as the pandemic, and playing on human emotions and trust.

“The temptation for organizations can be to see phishing attacks as a relatively low-level threat, but that underestimates their power. Phishing is often the first step in a complex, multi-stage attack. According to Sophos Rapid Response, attackers frequently use phishing emails to trick users into installing malware or sharing credentials that provide access to the corporate network. The team has seen at first-hand how a seemingly innocuous email can ultimately lead to a multi-million-dollar ransomware attack. Cryptojacking, data – and even financial – theft are all potential outcomes after a phishing attack has opened a door for adversaries. 

“The ideal would be to prevent phishing emails from ever reaching their intended recipient. Effective email security solutions can go a long way towards achieving this, but this should be complemented by alert and primed employees who are able to spot and report suspicious messages before they get any further.”

Advertisement
Advertisement
Advertisement

Like Us On Facebook

You May Also Like

HEADLINES

Palo Alto Networks has identified five key cybersecurity trends to watch out for in 2023.

HEADLINES

More than 8 in 10 (87%) respondents in the Philippines say their employees are using unregistered devices to log into work platforms. About 75%...

HEADLINES

The risks of expanding attack surface are also connected to the rising energy carrier prices and the resulting rises in hardware prices, would force...

HEADLINES

Kaspersky experts have collected a range of tips for parents and children on what to do if they’re bullied, and how to protect themselves. 

HEADLINES

Security has to be baked in from the start instead of an add-on feature in a connected world. In other words, it has to...

HEADLINES

Kaspersky researchers reported the number of attacks via Banking Trojans stealing payment data, doubled in 2022 compared with 2021, reaching almost 20 million attacks.

HEADLINES

To get a better overview of how scammers are trying to monetize football fans’ interest, Kaspersky experts have analyzed World Cup-related phishing websites from...

HEADLINES

The 2023 forecast is based on the expertise and the activities the Kaspersky Global Research and Analysis Team (GReAT) has witnessed this year while...

Advertisement