Cyberattacks: Phishing and Spear-phishing - Professor Martyn Thomas CBE

TL;DR

Phishing attacks are becoming more difficult to identify as criminals improve their tactics, including better language usage, personalized targeting, and fake company logos.

Transcript

lots of attacks of course start with emails phishing attacks and and spear phishing attacks emails to trick you into going to a website that's going to do something horrid to you or to opening an attachment that it's got some trojan code in it and we'll come back to to Trojan code in a bit these these phishing emails are often quite easy to spot bu... Read More

Key Insights

• 💌 Phishing attacks commonly start with deceptive emails that trick recipients into taking harmful actions.
• 💌 Criminals are improving their tactics by using proper English, personalizing emails, and mimicking legitimate company logos.
• 🏬 Finance departments are frequently targeted, with scammers posing as executives to instruct urgent payments.
• 📪 Phishing emails often exhibit red flags such as poor grammar, generic salutations, urgency, and suspicious web addresses.
• 🤨 Hovering over links in suspicious emails can reveal their true destination.
• 💌 Expanding the full headers of phishing emails can sometimes expose their true origin, although criminals may use compromised or fake email addresses.
• 🤑 Once money is transferred in response to a phishing email, it is difficult to recover as criminals quickly move it to another country.

Questions & Answers

Q: How are phishing attacks evolving to become harder to spot?

Phishing attacks are becoming more sophisticated as criminals improve their language skills and personalize the emails. They also mimic company logos to make the emails appear legitimate.

Q: Who are the primary targets of phishing attacks?

Finance departments are often targeted, with scammers impersonating executives. They send emails instructing urgent payments to new accounts, taking advantage of the trust and authority associated with these roles.

Q: What are some red flags to look for in phishing emails?

Some red flags include poor grammar and spelling, generic salutations like "Dear Customer," urgency in the message, and suspicious web addresses. Hovering over links can reveal if they are going to legitimate websites.

Q: How can the source of a phishing email be identified?

By expanding the full headers of the email, recipients can often see the true origin of the phishing email. However, criminals often utilize compromised or fake email addresses to hide their identity.

Summary & Key Takeaways

• Phishing attacks often start with emails that trick recipients into visiting malicious websites or opening harmful attachments.

• Criminals are getting better at crafting phishing emails by using proper English, personalizing messages, and mimicking legitimate company logos.

• Finance departments are often targeted, with scammers impersonating executives instructing urgent payments to new accounts.