One in 10 Reported Emails Verified as Malicious

[silversurfer]

New findings from Cofense have revealed that one in ten reported emails in 2018 were malicious, with more than 50% of those linked to fraudulent attempts to gather login and system information from users – known as credential phishing.

As detailed in its report The State of Phishing Defense 2018: Susceptibility, Resiliency, and Response to Phishing Attacks the firm analyzed more than 135 million phishing simulations, 800,000 reported emails and nearly 50,000 real phishing campaigns targeting organizations in 23 industries ranging from healthcare, financial services to manufacturing.

Key findings discovered that 21% of reported crimeware emails contained malicious attachments whilst the term ‘invoice’ was one of the most-used phishing subjects, appearing in six of the 10 most effective phishing campaigns this year. However, on a more positive note, Cofense claimed the overall phishing resiliency of users had improved in the last few years with reporting rates up 14% from three years ago. Interestingly, organizations in the utilities and energy industries were noted as building the most resiliency to phishing over time, but Cofense warned that overall industries involved with critical infrastructure still have work to do.

Source: https://www.infosecurity-magazine.com/ne...malicious/