Skip to main content

PHISHING: The 2023 State of the Phish Report - Proofpoint

PHISHING: The 2023 State of the Phish Report - Proofpoint
Syndicated By Iain Fraser - Cybersecurity Journalist Gibraltar

7th March 2023

Proofpoint releases its annual State of the Phish report
 
Every year, threat actors look for new tactics to outwit victims and bypass defences; 2022 was no different. As businesses rolled out new security controls, cyber criminals found new, sophisticated ways to attack people. 

One of ECSO's newest Members, Proofpoint, has released its ninth annual State of the Phish report, where they dive deep into complex new techniques that give attackers a new advantage. 


Here are a few highlights:
  • 44% of people think an email is safe when it contains familiar branding BUT more than 30 million malicious messages sent in 2022 involved Microsoft branding or products.
  • 300k-400k telephone-oriented attack delivery attempts were made daily, with a peak of 600k per day in August 2022.
  • Direct financial loss from successful phishing increased by 76% in 2022.
  • 75 million threats - around 1 in 10 - were blocked because of user reporting.
Iain Fraser Cybersecurity Journalist





About ECSO (European Cyber Security Organisation)

The European Cyber Security Organisation (ECSO) is a European, cross-sectoral membership organisation that contributes to developing cybersecurity communities and building the European cybersecurity ecosystem. ECSO federates the European Cybersecurity public and private sector, including large companies, SMEs and start-ups, research centres, universities, end-users and operators of essential services, clusters and associations, as well as the local, regional and national public administrations across the European Union Members States, the European Free Trade Association (EFTA) and H2020 Programme associated countries. Learn More /...


About Proofpoint

Email, social media, and mobile devices are the tools of your trade—and for cyber criminals, the tools of attack. Proofpoint protects your people, data and brand against advanced threats and compliance risks. Learn More /...


Image Credit: SiteLock via Flickr

Comments

Popular posts from this blog

CYBER BREACH: Data Breach Exposed Thousands of Pet Medical Records Including Owner Information

Tuesday, 5th December 2023 CYBER BREACH: Data Breach Exposed Thousands of Pet Medical Records Including Owner Information By Jeremiah Fowler - Website Planet  Syndicated By IainFraser.net/CYBER_Voice Daily Cyber Insights  Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to WebsitePlanet about a non-password protected database that contained over 56,000 records, including pet medical reports, DNA tests, pedigree history and other potentially sensitive information. As a long-time cyber security researcher, this is one of the most interesting discoveries I have ever encountered and a first for me.  I recently discovered a non-password protected database that contained records of thousands of dogs from around the world and included the information of their human owners. The publicly exposed cloud storage database contained a total of 56,624 documents in .PDF, .png, and .jpg formats with a total size of 25 GB. Upon further investigation, the database appeared...

EUROPOL: International operation closes down Piilopuoti dark web marketplace

EUROPOL: International operation closes down Piilopuoti dark web marketplace  Syndicated By: Iain Fraser Cybersecurity Journalist Gibraltar - PRWire Channel IainFraser.net/PRWire Thursday 21st September 2023 In a significant victory against dark web criminals, the Finnish Customs (Tulli), together with European partners, has successfully taken down the dark web marketplace ‘Piilopuoti’.  Drugs and other illegal commodities were sold in large quantities on this Finnish-language platform which had been operating on the Onion Router (Tor) network since May 2022.  This successful action by the Finnish Customs was supported, among others, by the German Federal Criminal Office (Bundeskriminalamt) and the Lithuanian Criminal Police Bureau (Lietuvos kriminalinÄ—s policijos biuras). Europol’s European Cybercrime Centre coordinated the international activity and provided operational support and technical expertise.  The investigation is still ongoing as law enforcement worldwi...

CYBER THREAT INTEL: AI - UK & US Spooks publish AI Development Guidance

Tuesday, 28th November 2023 CYBER THREAT INTEL: AI - UK & US Spooks publish AI Development Guidance Posted by: Iain Fraser - Cybersecurity Journalist Gibraltar via IainFraser.net/ Daily Cyber Insights CYBER THREAT INTEL: AI - UK & US Spooks publish AI Development Guidance The UK NCSC & US CISA have joint-published what they term as "security-focused guidance" for AI & ML developers and those who leverage AI/ML with their protocols and systems.  The Publication of Guidelines for Secure AI System Development (PDF),  apply to all types of AI/ML systems, regardless of whether built from wireframe up or added as a bolt-on on third-party resources, to address issues related to AI, cybersecurity, and critical infrastructure. Devised to be used in conjunction with existing Cybersecurity, Incident Response and Cyber Risk-Management protocols. The NCSC and CISA have said “Providers should implement security controls and mitigations where possible within their mode...