Phishing Tactics: 2023 Trends
Knowbe4 Post Image

Phishing Tactics: 2023 Trends

The results of KnowBe4’s 2023 Phishing By Industry Benchmarking Report are in!

Highlights from the comprehensive report:

  • In North America, ransomware continues to threaten organizations of all sizes and industries.
  • Given the success of ransomware over the last few years, cybercriminals have not needed to make major changes to their tactics, which continue to create a lucrative and profitable business model for them. The ransomware-as-a-service (RaaS) model comprises many successful attacks in North America.
  • Because most organizations have become reasonably good at restoring their data, in 2019, ransomware groups began to focus on getting access to and transferring data to use it as additional leverage. Cybercriminals know that information is power, and they use the threat of the public release of information as a significant source of leverage to get paid. This damages an organization’s reputation and can also be crippling from the potential fines from regulatory agencies.
  • Less publicly visible but just as devastating, another type of cybercrime, business email compromise (BEC), continues to surface as a prolific attack type.
  •  One key differentiator of BEC compared to other types of cybercrime is that BEC typically does not include any attachment or link in the email, indicators that many people have become suspicious of and that technical controls have a chance at spotting. Instead, BEC relies purely on social engineering and emotional manipulation to drive victims to take the attacker’s intended action. BEC attacks are very effective because they prey on employees’ trust in their colleagues. In many cases, the victim will not even think to question the email’s authenticity and will simply follow the instructions.
  • Vendor email compromise (VEC) is a growing threat to businesses. In a VEC attack, the attacker gains access to the email account of a trusted vendor and then uses that account to send fraudulent emails to the vendor’s customers.

Train your employees to spot these tactics and keep your network safe! Citynet partners with security awareness training leader, KnowBe4 and offers a free trial of this vital security platform. Contact us today!

Download Full Report

Like this article?

Share on Facebook
Share on Twitter
Share on Linkdin
Share on Pinterest

More Posts

MFA to Zero Trust Image

How to go from MFA to Zero Trust

Increased connectivity, coupled with the rise of remote and hybrid work, is prompting organizations to evolve their user access security and make strides toward a

Cybersecurity Training Image

Yearly Cyber Training Doesn’t Work

If you’re sticking to once-a-year sessions for your employees, it’s time to rethink your approach. Let’s face it, it’s likely dull and uninspiring. And if

Fact vs Myth Image

Debunking 5 Common Internet Myths

In the vast landscape of the internet, myths and misconceptions often abound, shaping our perceptions and influencing our online behaviors. At Citynet, we’re committed to

SuperPod with WiFi 6E

Plume SuperPod WiFi 6E Specs

SuperPod with WiFi 6

Plume SuperPod WiFi 6 Specs


Plume SuperPod Secs