Attackers are using cloud-based collaboration services as social engineering tools to trick users into clicking on malicious links, often for the purpose of wire fraud or supply chain fraud.
Devised by email security company GreatHorn and security awareness firm Inspired eLearning, a new quiz taken by 1,123 U.S. users showed how individuals actually respond to phishing scams. The results weren't great.
Researchers have recently warned of two massive phishing operations, collectively targeting hundreds of thousands of users – one seeking credentials for business services such as Office 365 and the other abusing Facebook Messenger to go after roughly 450,000 of the social media giant's account holders.
Skepticism about COVID-19 communications exemplifies a hidden cost of the fight against phishing and vishing scams: lost time and business inefficiencies caused by paranoid employees.
Businesses should remind their employees to resist interacting with emails sent from unknown sources, especially when their subject lines and content promise inside information on current events.