Speakers
Synopsis
Email continues to be the most used channel for cyberattacks and a lucrative access point for sensitive data. The continuing reliance on email by organizations is why it’s important to have a robust solution for email security – one that is integrated and adaptive for a wide range of email-based threats.
Phishing is one of the most prevalent forms of social engineering and email attack used to steal sensitive personal information, or to gain a foothold inside a company’s network. In a phishing attempt, malicious messages are crafted with the goal of the recipient clicking on a link or email attachment that contains malware, or in the case of Business Email Compromise (BEC), a bad actor will impersonate someone within a company to deceive the recipient into believing they're interacting with a trusted sender.
One of the biggest challenges organizations face is this lack of awareness on threats like phishing as well as how to handle, detect and respond to such attacks. Most often than not, attackers take advantage of this gap in security training in employees and target the most vulnerable aspect of the company; its people.
This session will start with a look into Advanced Persistent Threats, their impact to Small and Medium organizations as well as different phishing threats, tactics and trends we see today. ?Finally, we will discuss our findings from the Gone Phishing Tournament and discuss Security best practices to minimize damage as a result of Phishing.