Key findings from the Webroot Quarterly Threat Trends...iVerizon. “2017 Data Breach Investigations...

TODAY’S ATTACKS

Hide behind benign domains

Obfuscate true URLs

Carry more malignant payloads

Fool even security-savvyusers with realistic fakes

VOLUME

SOPHISTICATIONVOLUME

Phishing site lifespan: 4-8 hoursvi

Static lists are 3-5 days out of date

On average, over 1 MILLION new, unique phishing sites are created each monthv

Phishing is the #1 cause of breaches for businesses around the world.

– A recent Webroot-sponsored surveyiv of influencers found –

Learn more about the Webroot approach to real-time anti-phishing webroot.com/brightcloud

Key findings from the Webroot Quarterly Threat Trends

of breaches in the last year involved phishingi

90% of phishing emails now result in ransomwarei i

63% 35% 43%

have experienced a phishing attack in the last 2 years

expect to suffer more phishing attacks in

the next 2 years

plan to invest in new threat technology as

a result

WHAT MAKES PHISHING SO EFFECTIVE?Hackers are using more evasive tactics and getting better at fooling victims.

TOP MOST PHISHED COMPANIES

As phishing site creation rises and site lifespan shrinks, static lists won’t cut it. The only way to fight back is with real-time anti-phishing technology that uses advanced machine learning and real-time URL validation to spot zero-hour phishing sites in milliseconds, instead of relying on static, outdated lists.

THE SOLUTION

Crawls and evaluates requested URLs on demand,

in milliseconds

Analyzes site attributes like web reputation, IP

reputation, recent threat history, and live time to

return a risk score

Scans every site, every time it’s requested, to determine whether it’s phishing at that exact

moment

Brightcloud® Real-Time Anti-Phishing is the only service of its kind, enabling Webroot partners to add new functionality to protect their customers from costly security breaches and data loss.

iVerizon. “2017 Data Breach Investigations Report” (April 2017) iiInformation Age. “Phishing Emails now contain ransomware” (June 2016)iiiFBI. “E-mail Account Compromise, the 5 Billion Dollar Scam” (May 2017)

ivESG. “2017 Business Cybersecurity Trends” (August 2017) vWebroot Inc. “Quarterly Threat Trends” (September 2017) viWebroot Inc. “Quarterly Threat Trends” (September 2017)

PHISHING RECEIPTCybercriminal Copy

Cybercriminal Copy

Total yearly cost to U.S. businesses $500,000,000.00iii

Subtotal . . . . $500,000,000.00

Gratuity . . . . Passwords

Total . . . . $500,000,000.00

YOUR BANK CARD 1234

THANK YOU FOR YOUR MONEY

Key findings from the Webroot Quarterly Threat Trends...iVerizon. “2017 Data Breach Investigations...

Documents

Transcript of Key findings from the Webroot Quarterly Threat Trends...iVerizon. “2017 Data Breach Investigations...

Pc zombie,spim,spear,phishing,ransomware, spam y sam

The Rise of Ransomware...By far, most ransomware incidents are unleashed as a result of phishing and insecure websites. Forty-three percent of respondents say the ransomware was unleashed

Best Practices for Protecting Against Phishing, Ransomware ...security awareness training, data backup processes, strong internal control processes, implementation of technologies

Title: Ransomware: How consumers and businesses value ...... · latest threat trends including vulnerabilities, exploits, active attacks, viruses and other malware, spam, phishing,

PHISHING - ECSO · CYBERSECURITY A w a r e n e s s C a l e n d a r January – Phishing February – Internet of Things March – Cloud Security April – Malware May – Ransomware

Webroot Threat Brief 2016 · » Attackers can license ransomware from third parties - ransomware-as-a-service » Varieties getting harder to detect through thread injection, process

Ransomware Self-Assessment Tool Nonbank Decembe… · NO 5 Nonbank Ransomware Self-Assessment Tool / December 2020 . IDENTIFY/PROTECT ... Social engineering and phishing ... through

Phishing Incident Response · attacks just in the last several months. As of March 31, 2016, PhishMe found that 93 percent of all phishing emails analyzed contained encryption ransomware,⁴

Domain Abuse Analytics - gnso.icann.org · • Spamhaus Domain Block List (DBL) • Anti-Phishing Working Group eCrime eXchange (eCX). ... –Mozilla Firefox Adblock • Ransomware

Best Practices for Dealing With Phishing and Ransomware...quarter of 2016iii. • McAfee Labs discovered nearly 1.2 million ransomware attacks during the first quarter of 2016, a 24

Lessons Learned: Recovering from Ransomware · 2020. 7. 7. · Ransomware typically spreads through phishing emails or by unknowingly visiting an infected website.” In 2019 one

Data Privacy and Cybersecurity for Tax Professionals · • Identify and protect high-risk data. • Recognize the signs of phishing, spear-phishing, ransomware, malware, and other

Phishing and Ransomware Peter Wood · • Steal your passwords, PINs, email addresses • Infect your computer with a banking Trojan • Infect your computer with ransomware • Steal

HOW WEBROOT IS CHANGING THE GAME - Amazon S3 · 2017-10-13 · HOW WEBROOT IS CHANGING ... ransomware, malware, fraud, and other attacks. To keep businesses and users secure, Webroot

Webroot - Ransomware Threats

PHISHING PREVENTION TRAINING White Papers...phishing. Phishing emails are used by attackers to deliver viruses, steal passwords, install ransomware and impersonate corporate officers

THREAT 2019 WEBROOT REPORT · » Trends in (mostly polymorphic) malware and potentially unwanted apps (PUAs) » Ransomware, cryptojacking, and cryptomining » Malicious IP addresses

SPEAR PHISHING: UNDERSTAND, ANALYZE AND …...Spear phishing attacks aren’t always restricted to collecting private information though. Often, they will also be used to plant ransomware

WHAT’S NEW? Current and Future Security Threats · • Ransomware • Phishing • Hacked Workstation • FTP Server Misconfigured • Website Breach • Database ... - Monitoring

The Rise of Ransomware in Healthcare · Ransomware Delivery: Phishing Social-based Attack Fraudulent attempt made through email to fool the victim in order to acquire sensitive information.