{"id":3116,"date":"2021-07-27T18:27:53","date_gmt":"2021-07-27T17:27:53","guid":{"rendered":"https:\/\/telecomkh.info\/?p=3116"},"modified":"2021-07-27T18:27:53","modified_gmt":"2021-07-27T17:27:53","slug":"84-of-organizations-experienced-phishing-ransomware-type-threats-in-the-past-12-months","status":"publish","type":"post","link":"https:\/\/telecomkh.info\/?p=3116","title":{"rendered":"84% of organizations experienced phishing &#038; ransomware type threats in the past 12 Months"},"content":{"rendered":"<p><strong>New Trend Micro study reveals tips on how to mitigate phishing and ransomware<\/strong><\/p>\n<p>Trend Micro Incorporated, a global cybersecurity leader, published new research revealing that half of US organizations are not effective at countering phishing and ransomware threats.<br \/>\nThe findings come from an Osterman Research study commissioned by Trend Micro and compiled from interviews with 130 cybersecurity professionals in mid-sized and large organizations.<br \/>\n\u00abPhishing and ransomware were already critical enterprise security risks even before the pandemic hit and, as this report shows, the advent of mass remote working has increased the pressure of these threats,\u00bb said Jon Clay, vice president of threat intelligence for Trend Micro. \u00abOrganizations need multi-layered defenses in place to mitigate these risks. These range from phishing simulations to advanced threat detection and response platforms like Trend Micro Vision One, which alert security teams before attackers can make an impact.\u00bb<br \/>\nThe study asked respondents to rate their effectiveness in 17 key best practice areas related to ransomware and phishing, ranging from protecting endpoints from malware infection to ensuring prompt patching of all systems.<\/p>\n<p>Key takeaways from the report include:<br \/>\n\u2022 50% rated themselves ineffective overall at tackling phishing and ransomware.<br \/>\n\u2022 72% consider themselves ineffective at preventing home infrastructure from being a conduit for attacks on corporate networks.<br \/>\n\u2022 Only 37% believed they were highly effective at following 11 or more of the highlighted best practices.<\/p>\n<p>The report further split the threat landscape into 17 types of security incident and found 84% of respondents had experienced at least one of these\u2014highlighting the prevalence of phishing and ransomware. Most common were successful:<br \/>\n\u2022 Business email compromise (BEC) attack &#8211; 53%<br \/>\n\u2022 Phishing messages resulting in malware infection &#8211; 49%<br \/>\n\u2022 Account compromise &#8211; 47%<\/p>\n<p>Phishing remains among the top vectors for threat actors. Although it can be the first stage in a ransomware attack, it&#8217;s also used in BEC raids, or to infect victims with malware including info-stealers, banking trojans, spyware, crypto-miners, and more.<br \/>\nRansomware has become a modern epidemic, hitting government, hospitals, schools and private enterprises and any other targets deemed vulnerable to extortion and capable of paying. It results most often in both data loss and potential serious IT service outages.<\/p>\n<p>The security issues flagged by respondents as most concerning were:<br \/>\n\u2022 65% phishing attempts landing in user inboxes<br \/>\n\u2022 65% users clicking on phishing links or opening attachments<br \/>\n\u2022 61% data theft via ransomware actors<\/p>\n<p>The report also contains a trove of useful information for organizations including typical attack TTPs, effective mitigations and capabilities to look out for in commercial cybersecurity solutions.<\/p>\n<p>High success rates for both phishing and ransomware campaigns mean both are likely to intensify over the coming years. The report recommends that organizations embrace the following best practices to mitigate cyber-risk:<br \/>\n\u2022 Focus on root causes of compromise using a risk-based approach to address the most damaging threats<br \/>\n\u2022 Improve authentication via use of password managers, tweaking policies, monitoring for credential breaches and even using passwordless authentication<br \/>\n\u2022 Take a people, process and technology approach including user training, incident response processes and technology like Vision One to detect and respond to threats early on<br \/>\n\u2022 Don&#8217;t wait for a breach before developing an incident response plan. Reach out to law enforcement, managed services providers, your security vendors, and other key stakeholders now<\/p>\n<p><span style=\"color: #999999;\"><em>Above image credited to Trend Micro<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>New Trend Micro study reveals tips on how to mitigate phishing and ransomware Trend Micro Incorporated, a global cybersecurity leader, published new research revealing that half of US organizations are not effective at countering phishing and ransomware threats. The findings come from an Osterman Research study commissioned by Trend Micro and compiled from interviews with &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/telecomkh.info\/?p=3116\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> \u00ab84% of organizations experienced phishing &#038; ransomware type threats in the past 12 Months\u00bb<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":3117,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24],"tags":[],"_links":{"self":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/3116"}],"collection":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3116"}],"version-history":[{"count":1,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/3116\/revisions"}],"predecessor-version":[{"id":3118,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/3116\/revisions\/3118"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/media\/3117"}],"wp:attachment":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}