Access Denied
Phishing Attacks on Employees Increased by Telework IoT
Richard Smotherman | Minute Read
Problem:

Enterprise, small and medium business leaders, and their companies have become prime targets due to COVID-19 scams designed to exploit various vulnerabilities of your business. Their intent is to take control, hold for ransom your network systems and organizational infrastructure, so that you will feel forced to surrender and pay.

In the past month there has been increased cyber threat activity, by various organized groups, dispersed globally and collecting high ransoms and fines at alarming numbers. “There is a digitally historic event occurring in the background of this pandemic, and that is there is a cyber-crime pandemic that is occurring.” [Tom Kellerman, VMWare]

It is no longer a question of, if you get targeted and hacked, but rather when. Especially in these challenging times, your employees are the easiest gateway to organized threat actors.

These bad actors use clever ways to infiltrate employee email, through impersonation of someone in the company or other companies, and often succeed because employees are untrained on what to look for. 94% of the time, hackers gain access to your network and your data through a phish attempt. The average cost of a data breach, before COVID-19 was $6.75 million, but the numbers have potentially surged even higher.

Control the BYOD and Work from Home Environment:

Free Unlimited 10 user simulated Phishing Test = “Pulse Check”

A pulse check will report on the organization’s level of vulnerability to the phishing threat, then give you a score and suggestions based on the results.

The report will examine the employee percentage rate of people who passed, failed, and why:

• opened an email

• clicked a link

• opened an attachment

• Entered Credentials

After the Baseline Phish Test:

Phishing emails are a risk regardless of how the employee intercepts the message. Therefore, it is important to assess your company risk posture through your employees. We can train them on security basics to help protect your network perimeters, and perform routine simulated phishing tests, monthly or quarterly. Employees frequently use personal laptops and smartphones, to access company systems and data, and company assets to access personal accounts.

Resources:

Security Awareness Training Data Sheet

A pulse check will report on the organization’s level of vulnerability to the phishing threat, then give you a score and suggestions based on the results. The report will examine the employee percentage rate of people who passed, failed, and why: • opened an email • clicked a link • opened an attachment • Entered Credentials

How can you tell if an email is a phishing scam?  Video

Internal and External Employee Risk is Real:

Whether at home or the office, you are leaving gateways to hackers open, when internet connected equipment is detectable to hackers but undetected by you. These end point vulnerabilities are on the rise due to work and technology changes. Now is time to assess the current state of security for your company network from remote work threats. Testing your environment can save you money, Abacode wants to help you take the first step in assessment, by offering unlimited phishing, for up to 10 users.

24/7/365 Tele-Cyber Services by Abacode:

Abacode.com          1(866) 596-9020            insight@abacode.com