article thumbnail

What is Smishing? Definition, Examples and Prevention

IT Governance

Smishing is a type of phishing attack that’s conducted using text message services. According to Proofpoint’s 2022 State of the Phish Report , employees at 74% of organisations were sent fraudulent text messages in the previous year. How smishing works Smishing uses many of the same techniques as standard email phishing.

article thumbnail

GUEST ESSAY: How to mitigate the latest, greatest phishing variant — spoofed QR codes

The Last Watchdog

QR code phishing attacks started landing in inboxes around the world about six months ago. Lieberman At this stage, companies should (at a minimum) educate their employees about the prevalence of these attacks, and the key things to look out for as the most basic form of protection against them.

Phishing 202
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Phishing, the campaigns that are targeting Italy

Security Affairs

This post analyzed the numerous phishing campaigns targeting users and organizations in Italy. Phishing is a ploy to trick users into revealing personal or financial information through an e-mail, Web site, and even through instant messaging. Phishing can also be used as a precursor attack to drop malware. Just to name a few.

Phishing 120
article thumbnail

GUEST ESSAY: The rise of ‘PhaaS’ — and a roadmap to mitigate ‘Phishing-as-a-Service’

The Last Watchdog

Phishing is one of the most common social engineering tactics cybercriminals use to target their victims. Cybersecurity experts are discussing a new trend in the cybercrime community called phishing-as-a-service. Phishing-as-a-Service (PhaaS). Ready-to-use phishing kits with all necessary attack items are available on the web.

Phishing 198
article thumbnail

Anatomy of a spear phishing attack – with example scam

IT Governance

But those measures aren’t much help when criminals use phishing scams to bypass organisations’ defences and hit them where they’re most vulnerable: their employees. Fraudsters have countless tricks up their sleeve when targeting people for attacks, but perhaps the most dangerous is spear phishing. What is spear phishing?

article thumbnail

Should You Use Controversial Simulated Phishing Test Emails?

KnowBe4

The Wall Street Journal recently published an article about using highly-emotionally charged, “controversial”, subjects in simulated phishing tests. Controversial topic examples include fake pay raises, reward gift cards, and free Taylor Swift tickets. We have sent over a billion phishing tests over the last 13 years.

Phishing 103
article thumbnail

Catches of the Month: Phishing Scams for August 2023

IT Governance

Welcome to our August 2023 catches of the month feature, in which we explore the latest phishing scams and the tactics that cyber criminals use to trick people into handing over personal data. Check Point credits this rise to an extensive phishing campaign that told victims that there has been suspicious activity on their Microsoft account.