Phishing Remains Top Cyberattack Vector in 2017

[RoboMan]

Of all attack vectors, phishing remains the most commonly exploited, and accounts for 90% to 95% of all successful cyberattacks worldwide.

According to the IRONSCALES 2017 Email Security Report, culled from an online survey of 500 cybersecurity professionals, employees are most often victims of spoofing and impersonation (67%), followed by branded (35%) and seasonal attacks (31%).

Malicious emails continue to easily bypass legacy spam filters, firewalls and gateways through increasingly sophisticated CEO fraud and brand spoofing campaigns. Further, due to human nature, unaware or preoccupied users, even those actively engaged in an awareness training program, are easily lured into downloading an attachment or clicking on a malicious email link to inadvertently provide attackers with access to sensitive corporate networks and data.

Even when detected, nearly half of organizations (46%) reported that it takes a day or longer to remove phishing emails from endpoints once a phishing attack is reported to the security team—largely due to a lack of manpower. Accordingly, about three-quarters (72%) of security professionals said they believe automated inbox scanning and email forensics are the most valuable email security technology; and 93% of respondents agree that humans and technology need to work side-by-side in order to better detect and respond to sophisticated email phishing attacks.

On the flip side, almost a quarter (22%) said they could remove them within 30 minutes.

“When time is of the essence, as it is with stopping and minimizing phishing attacks, the integration of human intelligence with technology significantly and effectively expedites prevention, detection and response,” said Eyal Benishti, founder and CEO of IRONSCALES. “With email phishing attacks proliferating in frequency and complexity, it’s positive to find that cybersecurity professionals are beginning to recognize human-machine collaboration as an essential component of their organizations’ phishing response and email security strategies.”


What do you think? Will phishing continue to be the most used hacking technique for many more years?

Read on official source: Phishing Remains Top Cyberattack Vector in 2017

 

[Syafiq]

Nice articles , @RoboMan !
Will phishing be the top cyberattack technique for many more years?
I'm not sure about it, but i think yes

 

[In2an3_PpG]

and 93% of respondents agree that humans and technology need to work side-by-side in order to better detect and respond to sophisticated email phishing attacks.

Good luck. In the corporate world, there are not too many people that are concerned about being hit by phishing email attacks. It amazes me that i can sit there in front of a group of people at work and tell them that damage that could be caused if we were hit again and they just shrug their shoulders. I wish we could hold people more accountable for situations like these especially if you have been trained numerous times and you still open fake phishing emails.

 

[aragornnnn]

Install Netcraft Extension already... it's so gud

 

[tim one]

Sure, criminals are continuing to break the systems, pointing to the end-user, through phishing attacks. Although security technologies are becoming more efficient, they point to the thing that has not yet got improvements: the end user awareness about information security.
Criminals identify the key users by attacking them with shrewdness and adopting effective techniques of social engineering.

It does not matter how good and efficient security tools are; a lack of end users in training and education of security means that the attacks will never be defeated.

User is the weak link in the chain... perhaps it is rhetorical but it is better to keep alive the flame.