Intelligent CIO Europe Issue 34 | Page 28

HUMAN ERROR IS OFTEN SEEN AS A MAJOR CAUSE OF SECURITY INCIDENTS – IN FACT , WE REPORTED THAT NEARLY A QUARTER OF THE BREACHES ANALYSED IN OUR 2020 DBIR WERE DUE TO THIS . root of the majority of breaches ( over 67 %). Combine this attack success with uncertainty , fear and the need for COVID-19 information , then you will understand why phishing emails containing the words COVID , CORONAVIRUS , masks , test , quarantine and vaccine were found to be widely used within this time period .
TRENDING

the

HUMAN ERROR IS OFTEN SEEN AS A MAJOR CAUSE OF SECURITY INCIDENTS – IN FACT , WE REPORTED THAT NEARLY A QUARTER OF THE BREACHES ANALYSED IN OUR 2020 DBIR WERE DUE TO THIS . root of the majority of breaches ( over 67 %). Combine this attack success with uncertainty , fear and the need for COVID-19 information , then you will understand why phishing emails containing the words COVID , CORONAVIRUS , masks , test , quarantine and vaccine were found to be widely used within this time period .

We saw phishing emails unrelated to COVID-19 had a slightly lower click rate ( with a median of 3.1 %). The phishing emails that were linked to COVID-19 had a somewhat higher median at 4.1 % and showed more organisations having far higher click rates – over 50 % in some cases .
A phishing simulation performed on approximately 16,000 people in late March ( the early weeks of shelter-inplace for many states in the USA ) found that almost three times as many people not only clicked on the phishing link ,
but also provided their credentials to the simulated login page than in pre- COVID-19 tests late last year .
This heightened emotional response is completely understandable when COVID- 19-related terms are involved and are being exploited by cybercriminals .
Comprehensive security strategies can help steer in these unchartered waters
Businesses around the globe have continued to focus on serving their employees and customers as a priority throughout the pandemic . Armed with insights into the evolving tactics used by cybercriminals during this period and comprehensive security strategies – such as Managed Security Services , identity solutions and , most importantly , ongoing employee education – we can set a more productive course to help create a more secure business environment and maintain business momentum . •
28 INTELLIGENTCIO www . intelligentcio . com