Connect with us

Hi, what are you looking for?

HEADLINES

Phishing attacks on employees increased in 70% of organizations during pandemic – Sophos

The vast majority (70%) of all IT teams said the number of phishing emails hitting their employees increased during 2020. This rose to 82% of IT teams in organizations that had been struck by ransomware during the year.

Photo by Jon Moore from Unsplash.com

Sophos published “Phishing Insights, 2021,” which looks at the experience and understanding of phishing in organizations around the world during 2020. 

The results show that phishing attacks targeting organizations ramped up considerably during the pandemic, as millions of home-working employees became a prime target for adversaries.

The vast majority (70%) of all IT teams said the number of phishing emails hitting their employees increased during 2020. This rose to 82% of IT teams in organizations that had been struck by ransomware during the year.

Other highlight findings from the research include:

  1. IT professionals can’t agree on a single definition of phishing. The most common understanding of phishing, selected by 57% of respondents, is “emails that falsely claim to be from a legitimate organization, usually combined with a threat or request for information.” Forty-six percent consider Business Email Compromise (BEC) attacks to be phishing, and more than one-third (36%) think threadjacking (when attackers insert themselves into a legitimate email thread as part of an attack) is phishing.
  2. Most (90%) organizations run cybersecurity awareness programs to address phishing. However, in the light of the survey results, phishing awareness and education programs need to consider the wide range of perceived phishing definitions and include training for non-technical employees that explain the different facets of phishing and email attacks in general.

Chester Wisniewski, principal research scientist at Sophos, said: “Phishing has been around for over 25 years and remains an effective cyberattack technique. One of the reasons for its success is its ability to continuously evolve and diversify, tailoring attacks to topical issues or concerns, such as the pandemic, and playing on human emotions and trust.

“The temptation for organizations can be to see phishing attacks as a relatively low-level threat, but that underestimates their power. Phishing is often the first step in a complex, multi-stage attack. According to Sophos Rapid Response, attackers frequently use phishing emails to trick users into installing malware or sharing credentials that provide access to the corporate network. The team has seen at first-hand how a seemingly innocuous email can ultimately lead to a multi-million-dollar ransomware attack. Cryptojacking, data – and even financial – theft are all potential outcomes after a phishing attack has opened a door for adversaries. 

“The ideal would be to prevent phishing emails from ever reaching their intended recipient. Effective email security solutions can go a long way towards achieving this, but this should be complemented by alert and primed employees who are able to spot and report suspicious messages before they get any further.”

Advertisement. Scroll to continue reading.

Advertisement
Advertisement

Like Us On Facebook

You May Also Like

Biz Solutions

To help corporate security and incident response teams facilitate threat detection, investigation and response and raise the efficiency of IT security operations, Kaspersky has...

HEADLINES

The sales season attracts the attention of shoppers and retailers; however, it is also a favorite of cybercriminals who do not hesitate to cash...

HEADLINES

The spyware presents itself as an update app with a generic icon and name, such as “App Updates.” Sophos researchers believe the attackers distribute...

HEADLINES

From October 21 to November 20, Smart has blocked an average of 400 to 500 mobile numbers daily that have been found to be...

HEADLINES

The changes in the world in 2021 have a direct effect on the development of sophisticated attacks in the coming year.

HEADLINES

A new global survey, commissioned by Kaspersky, explores the role of healthy digital habits in the family, as well as the effect of parents’...

White Papers

The report, written by SophosLabs security researchers, Sophos Managed Threat Response threat hunters and rapid responders, and the Sophos AI team, provides a unique...

HEADLINES

To prevent business disruptions, SeaWright enumerated the following best practices: ensuring hardware and software up to date; requiring multi-factor authentication; enabling strong spam filters;...

Advertisement