Phishing Tactics: 2023 Trends

Knowbe4 Post Image

The results of KnowBe4’s 2023 Phishing By Industry Benchmarking Report are in!

Highlights from the comprehensive report:

  • In North America, ransomware continues to threaten organizations of all sizes and industries.
  • Given the success of ransomware over the last few years, cybercriminals have not needed to make major changes to their tactics, which continue to create a lucrative and profitable business model for them. The ransomware-as-a-service (RaaS) model comprises many successful attacks in North America.
  • Because most organizations have become reasonably good at restoring their data, in 2019, ransomware groups began to focus on getting access to and transferring data to use it as additional leverage. Cybercriminals know that information is power, and they use the threat of the public release of information as a significant source of leverage to get paid. This damages an organization’s reputation and can also be crippling from the potential fines from regulatory agencies.
  • Less publicly visible but just as devastating, another type of cybercrime, business email compromise (BEC), continues to surface as a prolific attack type.
  •  One key differentiator of BEC compared to other types of cybercrime is that BEC typically does not include any attachment or link in the email, indicators that many people have become suspicious of and that technical controls have a chance at spotting. Instead, BEC relies purely on social engineering and emotional manipulation to drive victims to take the attacker’s intended action. BEC attacks are very effective because they prey on employees’ trust in their colleagues. In many cases, the victim will not even think to question the email’s authenticity and will simply follow the instructions.
  • Vendor email compromise (VEC) is a growing threat to businesses. In a VEC attack, the attacker gains access to the email account of a trusted vendor and then uses that account to send fraudulent emails to the vendor’s customers.

Train your employees to spot these tactics and keep your network safe! Citynet partners with security awareness training leader, KnowBe4 and offers a free trial of this vital security platform. Contact us today!

Download Full Report

Like This Post?

Facebook
X
LinkedIn
Email

More Posts

WV 811 Dig Image
Fiber

Before You Dig in West Virginia: Why Calling 811 Matters

Spring has arrived in West Virginia, and with it comes a surge of outdoor projects—planting trees, installing fences, landscaping, and home improvements. Before you start digging, there is one step you should never skip: Contact West Virginia 811. It is free. It is simple. And in West Virginia, it is the law. What Is West Virginia 811? West Virginia 811

Fake Permitting Scam Image
The Latest Scams

Scammers Are Targeting Home Projects—Here’s What to Watch

If you’re building, renovating, or improving your home, there’s a new scam you need to watch for—and it’s catching people at exactly the wrong time. How the Scam Works You receive an email that appears to come from a local government office—maybe your city, county, or permitting department. The message claims there’s an issue with your project and that you

Hand Remote Control Image
Fiber

Stop the Buffer: How to Get the Most from Your Streaming Experience

There’s nothing more frustrating than getting to the final seconds of a close game—only to see the spinning buffering wheel right before the winning shot. While buffering is often blamed on slow internet, that’s not always the case—especially if you’re already connected to Citynet Fiber. Your streaming device, settings, and even your home network setup can all impact performance. Here’s

Photography Tips Image
Technology

Phone Photography Tips: Take Better Photos This Spring

Capture Spring Like a Pro — With Just Your Phone Spring is one of the most photogenic times of year—blooming flowers, longer golden-hour light, and weekends filled with moments worth remembering. The best part?You don’t need a $3,000 camera or professional training to capture it all. The phone in your pocket is more powerful than most people realize. With just

Cybersecurity Hacker Hoodie Image
Cybersecurity

How Long Attackers Stay in a Network Before They’re Discovered

When people imagine a cyberattack, they often picture a dramatic event — systems suddenly shutting down or files becoming encrypted. But many cyber incidents don’t unfold that way. In many cases, attackers quietly gain access to a network and remain there for weeks or even months before being discovered. This period is known as “dwell time.” During this time, attackers

Cybersecurity Alert Critical Image
Cybersecurity

5 Critical Mistakes to Avoid During a Cyberattack

Think your business may already be compromised? See the warning signs and response steps here Even well-intentioned actions can make a cyber incident worse Cyberattacks often unfold quickly, and the wrong response in the first few minutes can make an incident far more difficult to contain and investigate. When a cyber incident occurs, the natural reaction is to act quickly

SuperPod with WiFi 6E

Plume SuperPod WiFi 6E Specs

SuperPod with WiFi 6

Plume SuperPod WiFi 6 Specs

SuperPod

Plume SuperPod Secs