- IT Services
- Enterprise IT Services
- Managed IT for Small and Medium Sized Businesses
- Service & Support
- EO Johnson
- About Us
Working from home is not going anywhere. In fact, research shows that post-pandemic 42% of employees who worked strictly from a company-based location will not return to the office. Do you know how this will impact your business? Learn more about the tools needed to protect your client data and improve employee productivity.
Check out the latest happenings in the world of IT from our Locknet® experts. In this issue, we highlight some topics your organization should be aware of to minimize risks. Specifically, mitigating insider threats to your security and the risks of hanging on to legacy data.
Phishing is among the biggest cyber threats facing businesses today. An estimated 91% of incidents that end in a data breach start with a phishing email. Phishing is a favorite tool of hackers, so it’s important to understand and recognize it. We’ll take a closer look at three concerning varieties of phishing to learn what to look for and how you can avoid being a victim of a cyberattack.
Phishing is a kind of cyberattack used to steal users’ sensitive data like personal information, login credentials, and credit card numbers. A phishing attack is often carried out with fake emails and the cloning of legitimate websites to trick users into revealing sensitive information.
Spear phishing is the most common type of specialized phishing attack and can be aimed at anyone at any level in an organization. Spear phishers gather information about you, so they legitimately look and sound like the person or entity you trust. When successful, unsuspecting victims often willingly hand over their information, which can include data that allows these scam artists to log into your accounts, gain access to your finances, or hack your data. Victims will also click on links and attachments, unknowingly downloading malicious codes or malware attachments.
Tips to Avoid Spear Phishing
Things to look for: urgency in the subject and body; whether the sender’s email address is in your outlook address book; don’t click on links you aren’t sure about.
Whaling is a more targeted type of spear phishing that takes aim at senior executives and CEOs. This type of phishing message is crafted to imitate a company executive or to fool a company executive into thinking the message is from a trusted source. Impersonating someone the victim knows differentiates it from spear phishing. A company executive is an ultimate prize for cybercriminals as the boss can access information and resources that no other employee can reach. Attackers use whaling to gain access to money, attack a supply chain, steal intellectual property, and distribute malware.
Tips to Avoid Whaling Attacks
Things to look for: an unusual request; urgency in the body; don’t click on attachments you aren’t sure about.
Angler phishing is a newer type of attack involving social media. Often, attackers entice the target to interact with a fake page so they can capture the victim’s personal information. Cybercriminals are adept at imitating messages from any social network to lure unsuspecting victims. They use email, direct messages, posts, and comments to conduct phishing. In one of the most common scenarios, the bad actor is pretending to be a customer service representative. The attacker finds people who are complaining online about a business and then responds to their problem before the legitimate company does by using a spoofed social media account. The spoofed account will often have an official-looking logo and content. If personal information is provided to the attacker, it can then be used for identity theft. And if a victim clicks on a link, they can be taken to a fraudulent website where their login credentials are stolen.
Tips to Avoid Angler Phishing
Things to look for: whether you have received an email like this before directly from Facebook; whether you have a direct message from someone in Facebook Messenger; the vagueness of “someone”; don’t click on a link to a login screen where someone can capture your credentials.
Even with the best tools, malicious contacts and emails will still get through. When that happens, the only thing preventing your organization from a breach is your employees’ ability to detect the threat and respond appropriately. Educating your employees on phishing threats and cybersecurity awareness is essential to protecting your company’s network and data. Your customers also want to know they are working with a company that will protect their data.
Locknet® Managed IT provides Security Education and Awareness Training to help you support a culture of security awareness in your company. When you’re ready to bring cybersecurity awareness to the forefront of your employee training program, we’re here to help. Contact us to learn more.