Phishing Evolution

Phishing Evolution by Aisha Berry

Thank you to Aisha Berry for sharing her blog.
Founder and Principal Consultant, CyberSec Health Consulting
data@cybersechealth.com
www.cybersechealth.com

In the digital threat landscape, phishing attacks continue to play a dominant role, making it one of the top attacks in today's digital world. According to Verizon Enterprise, phishing is the second topmost threat action variety in security incidents and data breaches. It brings disastrous cybersecurity threats, such as Ransomware, to the forefront. Digital fraudsters and cybercriminals utilize a combination of anomalous behavior, savviness, and devious techniques to spoof end-users enticing to interact with disguised emails resulting in horrendous results.

Phishing stats in 2021 illustrate the dangers imposed on an organization

• Phishing attacks account for the majority of reported security incidents.
• 7 out of 10 organizations globally and in the United States experience phishing attacks in 2020.
• Half of the email attachments received are malicious office files
• 9 out of 10 malware is delivered via email.
• A cyberattack occurs every 39 seconds.
• 35% of organizations experience spear phishing.
• 6 out 10 organizations face Business Email Compromise
• Cyber gangs' reliance is spearfishing as the primary attack vector.
• Google has registered an average of 2.2 million phishing sites and counting
• Phishing websites surged to 350% websites during the Coronavirus Pandemic.

It's imperative to update the server whitelist and blacklist, installing updates and patches, minimized phishing attacks. However, impressing the importance of performing security awareness training, end-users can detect some of the most common types of phishing emails. However, it doesn't mean detecting each one because phishing is constantly evolving in the cyber realm leading to adopting techniques. Ongoing training decreases the risk while employees can stay prepared for phishing evolution.