Latest Phishing Email Trends: Incre...

15
05

Latest Phishing Email Trends: Increasing Threats of Phishing Attacks Disguised as Security Warnings and Personnel Notices

--KnowBe4 publishes top 10 report on subject matter to watch in the second quarter of 2021 -

Know Before

Tokyo (July 23, 2021)-KnowBe4, the world's largest provider of integrated platforms that combine security awareness training with phishing simulation and analysis (Headquarters: Tampa Bay, Florida, USA, Founder and CEO: Stu Sjouwerman) (Stu Sjouwer)) continuously assesses how vulnerable the attack is through simulated phishing attacks as a PPP (Phishing Prone Percentage). This statistical data is published quarterly as the latest phishing email trends. In this press release, we will publish the highlights of the "Subjects of Interest" statistical report for the second quarter of 2021 (April-June 2021).

In connection with this report, it is reported that phishing email attacks disguised as personnel notifications are increasing rapidly. In particular, the number of phishing emails pretending to be new or revised internal rules that apply to employees across the company or organization is increasing significantly. KnowBe4 also aggregates actual emails in this statistical report. A continuing trend in actual phishing emails reported to the IT department is an increase in phishing emails disguised as password verification requests. In terms of subject matter of interest, phishing emails related to the new coronavirus have dropped sharply. At the same time, as pointed out in the same report in the first quarter, more people are becoming more aware of the threat of coronavirus-related phishing emails, and it seems that they are becoming more alert to this type of attack. In addition, social media-related messages continue to be a hot category as a means of phishing. LinkedIn phishing emails, which are used to collect job and job-seeking information, are the most common social media-related message, accounting for 41%. Stu Sjouwerman, CEO of KnowBe4, commented on this phishing email trend: "In the background of this quarter's trend, many employees have finished corona vaccination, and with this, the return from remote work to office work has begun. In connection with this, many companies are new in-house. Regulations have been issued. There are phishing emails disguised as such notices. Cyber ​​attackers exploit every opportunity. The important thing here is before opening the links or attachments in the email. The first thing to do is to stop and double-check. Don't trust, doubt. Each employee is the final line of defense. Are security awareness training and phishing email exercises offered? ”In this statistic, KnowBe4 is a simulated phishing attack conducted on the KnowBe4 platform in the second quarter of 2021 (April-June 2021). Checking tens of thousands of email subject lines from the test. KnowBe4 also uses the company's Phish Alert button to check the subject line of the actual email that the end user reported to the IT department as a suspicious email. The results of this statistical data aggregation are as follows. * The subject in this statistical data is in English, but it has been translated into Japanese. The English name (capital letters, spelling) is written as it is. ** The subject in this stats includes both his phishing template prepared by KnowBe4 for you and one customized by your KnowBe4 customers. In addition to mock phishing emails, KnowBe4 is also investigating the subject line of the actual email. The following are the most common subject lines of actual emails that KnowBe4 detected in the second quarter of 2021. * The subject in this statistical data is English, but it has been translated into Japanese. The English name (capital letters, spelling) is written as it is. ** The actual email subject is the subject of the email that the end user actually received and reported to the IT department as a suspicious email. It is not the subject of the email in the mock phishing test. To find out more about KnowBe4, please visit www.knowbe4.jp. About KnowBe4 KnowBe4 is the world's largest provider of integrated platforms that combine security awareness training with phishing simulation and analysis. KnowBe4 was founded in August 2010 by IT / data security expert Stu Sjouwerman in Tampa Bay, Florida, USA, with a focus on the "human element: overcoming human errors" in security. By raising awareness of the security of each and every employee, such as ransomware, CEO attacks / scams, and sophisticated social engineering techniques such as business email fraud (BEC), security threats targeting "people", individuals, organizations, We support the defense of organizations. Kevin Mitnick, the world's most prominent cybersecurity specialist, is the CHO (Chief Hacking Officer). KnowBe4's training program is built on his hacker's perspective. As of June 2021, more than 39,000 companies and organizations have adopted KnowBe4 to build a “human” defense barrier as the final line of defense. In Japan, in November 2019, we established "KnowBe4 Japan GK", a wholly owned Japanese subsidiary of KnowBe4, in Minato-ku, Tokyo, and started full-scale sales and marketing activities in Japan. https://www.knowbe4.jp/ * The following is special information limited to media personnel. Please refrain from disclosing information on personal SNS etc.
This press release contains information for the media community.

If you register as a media user, you can view various special information such as contact information of the person in charge of the company and information on events and press conferences. * Contents vary depending on the press release.

  1. Press Release>
  2. Know Before>
  3. Latest Phishing Email Trends: Increasing Threats of Phishing Attacks Disguised as Security Warnings and Personnel Notices

最新フィッシングメール動向:セキュリティ警告や人事通達を装うフィッシング攻撃の脅威が増加