QR code for the current URL

Press release Box-ID: 643867

MWR InfoSecurity Churchill Plaza RG21 7GP Basingstoke http://www.mwrinfosecurity.com/
Contact Mr Julian Menendez +44 20 7544 8831
Company logo of MWR InfoSecurity
MWR InfoSecurity

Businesses are still failing to respond efficiently to phishing attacks

(PresseBox) (Basingstoke, )
Global information security consultancy MWR InfoSecurity warned today that most companies do not have efficient security processes in place to respond to phishing emails, which are often the pre-curser to specific attacks where a company can be seriously hacked.

"Spear-phishing attacks against organisations are nothing new, but they are rising steeply in both frequency and complexity," said Guillermo Lafuente, a Senior Security Consultant at MWR specialising in Social Engineering attacks.

"These attacks start with an innocent looking email that appears to come from a trustworthy source but have evolved to the extent that often neither the individual nor the organisation are even aware that an incident has occurred until it is too late and confidential data has been stolen."

He added: "They are mainly designed to deceive employees, who are still seen as the 'weakest link', but we noticed that many companies do not have efficient internal incident response procedures in place to alert their staff about the threat."

MWR has identified a number of key processes that should be functional for an organisation to be able to resist these external threats, including the length of time before a phishing email is recorded as an incident and having effective out-bound email filters implemented to prevent the leakage of sensitive data.

Guillermo Lafuente said: "For example, companies should be able to respond to a phishing attack within 15 minutes of receiving the malicious email. Efficiency at the early stages is crucial, however, many of them fail to react within the recommended time frame."

Worryingly, phishing attacks are also commonly employed as an element of APT (Advanced Persistent Threat) due to their high success and low detection rates, and the ease by which an attacker can target a large estate of users within an organisation.

Employees are then deceived into providing sensitive information or into performing actions such as downloading malware that could give an attacker access to the victim's computer and even compromise the company's entire IT network.

For these reasons, MWR have launched Phish'd, a fully Managed Phishing Assessment service designed to maintain a heightened level of security awareness across an organisation, thus reducing the likelihood of employees clicking suspicious links within emails, and helping improve incident response timings.

James Moore, the Lead Developer of Phish'd at MWR InfoSecurity, said: "One of the benefits offered by Phish'd is the ability to track susceptibility across different departments, offices and geographical regions where a company operates - allowing organisations to identify those areas where their training and security budgets can be best spent for maximum effect."

Christina Randell, Head of Managed Services at MWR, said: "Phish'd provides organisations with a thorough analysis and sets out recommendations aimed at improving their security posture, both from personnel and infrastructure perspectives. This will help to ensure that in the result of a real-world attack the business can react quickly and effectively."

MWR InfoSecurity

MWR InfoSecurity is one of the world's leading information security consultancies. The company specialises in identifying, managing and mitigating Information Security risks.

MWR undertakes simulated cyber attacks with organisations across different industries to help them understand the security threats they are facing.

The publisher indicated in each case is solely responsible for the press releases above, the event or job offer displayed, and the image and sound material used (see company info when clicking on image/message title or company info right column). As a rule, the publisher is also the author of the press releases and the attached image, sound and information material. The use of information published here is generally free of charge for personal information and editorial processing. Please clarify any copyright issues with the stated publisher before further use. In case of publication, please send a specimen copy to service@pressebox.de.
Important note:

Systematic data storage as well as the use of even parts of this database are only permitted with the written consent of unn | UNITED NEWS NETWORK GmbH.

unn | UNITED NEWS NETWORK GmbH 2002–2022, All rights reserved

The publisher indicated in each case is solely responsible for the press releases above, the event or job offer displayed, and the image and sound material used (see company info when clicking on image/message title or company info right column). As a rule, the publisher is also the author of the press releases and the attached image, sound and information material. The use of information published here is generally free of charge for personal information and editorial processing. Please clarify any copyright issues with the stated publisher before further use. In case of publication, please send a specimen copy to service@pressebox.de.