Users Remain Mostly Oblivious to Spear Phishing

A new survey shows that 50 percent of employees think that their company has been the victim of a targeted attack. Security firm Proofpoint found in its survey that these targeted attacks continue to be a nuisance, affecting both small and large organizations.  

A new survey shows that 50 percent of employees think that their company has been the victim of a targeted attack. Security firm Proofpoint found in its survey that these targeted attacks continue to be a nuisance, affecting both small and large organizations.  

A similar number, 56 percent of responders, believed their larger organization, those with 1,000 or more email users, were targeted as well. Another sizeable chunk, 34 percent of those who responded, said they had experienced a spear phishing attack believed the attack “resulted in the compromise of user login credentials or unauthorized access to corporate IT systems,” according to the survey.

The survey consisted of responses from more than 330 IT/risk management/compliance professionals who attended Microsoft’s TechEd conference in Orlando last month.

One of the bigger attacks in 2011, the attack on network security company RSA last spring, was technically spear phishing via an Excel spreadsheet that led to a malicious Flash payload. A recent study by mobile security firm Intrepidus Group found that roughly three quarters of employees fall for phishing scams.

Suggested articles

It’s Not the Trump Sex Tape, It’s a RAT

Criminals are using the end of the Trump presidency to deliver a new remote-access trojan (RAT) variant disguised as a sex video of the outgoing POTUS, researchers report.

biggest headlines 2020

The 5 Most-Wanted Threatpost Stories of 2020

A look back at what was hot with readers — offering a snapshot of the security stories that were most top-of-mind for security professionals and consumers throughout the year.

Discussion

Subscribe to our newsletter, Threatpost Today!

Get the latest breaking news delivered daily to your inbox.