Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing,...

44
Responding to Security Incident: MyCERT approach and case study FIRST TC 2012 @ KYOTO 1315 November 2012 By: Megat Muazzam Abdul Mutalib Manager Emergency Response (Cyber999), MyCERT

Transcript of Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing,...

Page 1: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Responding  to  Security  Incident:  MyCERT  approach  and  case  study  

FIRST  TC  2012  @  KYOTO  13-­‐15  November  2012  

By:  Megat  Muazzam  Abdul  Mutalib  Manager  Emergency  Response  (Cyber999),    

MyCERT  

Page 2: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Agenda  

  About  MyCERT    Trends  +  StaQsQc    Case  Study    Success  and  Challenges  

2

Page 3: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

MyCERT •  Established in 1997 •  Roles:

–  Incident Handling & Response

– Technical Co-ordination – Alert and Advisories – National Cyber Security Exercises

•  Works closely with various partners, locally and Internationally

•  Constituents: ALL Internet users in Malaysia

3

Page 4: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

MyCERT (2) •  2 Core Groups

– Cyber999 / Incident Response

– Malware Research Centre

•  Strengths – 20 Personnel – > 10 until 2007

– Supported by other departments and initiatives at CyberSecurity Malaysia

4

Page 5: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

MyCERT (3) •  No ‘Enforcement Power’

– Based on trust

– Provide technical expertise for assisting victims of cyber security incidents

•  Collaboration – Vast network of contacts via other security

teams, vendors and law enforcement agencies

5

Page 6: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Copyright  ©  2010  CyberSecurity  Malaysia  

Cyber999  StaQsQcal  Reports  

6

Page 7: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Overview of Stats •  Growth of Incidents reflect ‘changing’ times and more

reliance of the Internet –  i.e. rise of harassment and scam due to prevalence of social

networking

–  Ability for the team handle more incidents increased after 2007 due to more resources

•  National CERT fills in the gap in dealing with emerging threats – i.e. malware, phishing, targeted attack, cyber harassment and more

•  Incident data created awareness, generate interests and pushed forward other initiatives –  CNII Protection, Cyber Crisis Management, Training and

Awareness 7

Page 8: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

115   342  728   503  

932   739   947   915   835  1372  1038  

2123  

3564  

8090  

15218  

0  

2000  

4000  

6000  

8000  

10000  

12000  

14000  

16000  

Incidents  Handled  1997  –  2011    

Incidents  

Source:  www.mycert.org.my    

More  resources  resulQng  beYer  handling  due  to  automaQon    

8

Page 9: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

4   6   17   3   10   16   28   106   149  287   364  

907   1022  

2212  

5328  

0  

1000  

2000  

3000  

4000  

5000  

6000  

Fraud  Incidents  1997  –  2011    

Fraud  

Source:  www.mycert.org.my    

Trend:  Criminals  increasing  their  efforts  to  target  Internet  users  due  to  growth  of  E-­‐Commerce  +  Lack  of  user  awareness  i.e.  Phishing,  Advanced  Fee  Fraud  

9

Page 10: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

5  10   10  

25  

19  

11  

5   5   7   6   8  12  

28  

66  

78  

0  

10  

20  

30  

40  

50  

60  

70  

80  

90  

DDoS  Incidents  1997  -­‐  2011  

DDoS    

Source:  www.mycert.org.my    

Rise  of  Malware  parQcularly  botnet  had  provide  resources  to  be  used  for  DDoS.  Increase  of  acQviQes  of  HackQvism  recently  led  to  this  increasing  trend  

10

Page 11: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

22   37   63   48  198  

60   60  

368  467  

897  

385  

766  

1766  

2160  

2699  

0  

500  

1000  

1500  

2000  

2500  

3000  

Intrusion  Incidents  1997  -­‐  2011  

Intrusion  

Source:  www.mycert.org.my    

The  rise  of  malware,  hacking  tools  coupled  with  lack  of  best  pracQces  in  deploying  and  managing  servers/computers  contributed  to  the  rise  in  intrusion  incidents  

11

Page 12: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

8   11   11   16   23  11  

27  47   45  

63   68   72  

174  

419  

459  

0  

50  

100  

150  

200  

250  

300  

350  

400  

450  

500  

Cyber  Harassment  Incidents  1997  -­‐  2011  

Cyber  Harassment  

Social  networking  sites,  video,  blogs  and  lack  of  eQqueYes  led  to  the  increase  in  users  being  abused  or  harassed      

Source:  www.mycert.org.my    12

Page 13: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

0  

10  

20  

30  

40  

50  

60  

1997  

1998  

1999  

2000  

2001  

2002  

2003  

2004  

2005  

2006  

2007  

2008  

2009  

2010  

2011  

Advisories  &  Alerts  Published  1997  -­‐  2011  

Advisories  &  Alerts  

13

Page 14: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Statistic by Incident (1st Half 2012)

0  

500  

1000  

1500  

2000  

2500  

11  

177  

12  

2451  

2207  

66  

854  

280  

47  

14

Page 15: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Case Study

15

Page 16: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Case Study : Job Scam

  The  Setup  

  Poses  as  a  recruitment  agency    

  Email  sent  to  potenQal  vicQm  that  really  looking  for  job  

  Impersonate  local  MNC  –  usually  in  oil  and  gas  industry  

  VicQm  most  of  it  is  not  local  

  What  actual  happen  

  Email  sent  usually  spoof    

  EnQce  vicQm  by  giving  job  descripQon  /  salary  /  aYracQve  perk  

  Eventually  a  charge  is  required  as  a  processing  fee  for  Employment  

   RegistraQon  CerQficate  /  Visa  /  RegistraQon  Card      

  The  Risk  

  Money  lost  

  SQll  end  up  without  a  job      

16

Page 17: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

From:  [email protected]  Subject:  JOB  OPPORTUNITIES@  PETRONAS  OIL  COMPANY  MALAYSIA  Date:  Wed,  22  Dec  2010  18:23:33  +0000  Dear  Employee,  

We  have  confirmed  your  CV/Resume,  in  the  below  mail  you  will  find  the  current  posiQons  where  expatriates  are  needed  in  our  Company..  

 All  the  posiQons  include  these  below  benefits:  

1.  Five  Bedroom  Flat  Duplex  2.  Free  Medical  &  Travel  Insurance  3.  10  Days  Leave  /  break/  VacaQon  aler  every  90  working  days  4.  Flight  Fares  (Air  Tickets)  5.  Free  Toyota  Camry  2007  Model.  

A.  Current  CV/Resume  B.  One  Reference  LeYer.  C.  Passport  Copy.  

The  Documents  should  be  provide  to  us  through  scan  e-­‐mail  aYachment  For  fast  processing,  because  all  the  posiQons  need  expatriates"  who  Can  be  able  to  start  up  employment  on  January/March  2011,  and  all  the  Arrangement  need  to  be  made  as  fast  as  possible.  

Page 18: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Case Study : Job Scam (Sample)

18

Page 19: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Case Study : Fraud Purchase

  The  Setup  

  Send  in  your  money  and  get  nothing  

  What  actual  happen  

  Never  get  the  product  promised  

  Promises  don’t  match  the  product  

  Product  descripQon  may  be  vague,  incomplete  or  completely  fake        

  The  Risk  

  Get  ripped  off  

  Losing  Qme  and  money      

19

Page 20: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Case Study : Nigerian Scam

  The  Setup  

  Receive  an  email  wriYen  in  screaming  capital  leYer  or  very  lengthy  

   Example  -­‐  "DEAR  SIR/MADAM:  I  REPRESENT  THE  RECENTLY  DEPOSED  MINISTER  OF  AGRICULTURE  FOR  NODAMBIZIA,  WHO  HAS  EMBEZZLED  30  MILLION  DOLLARS  FROM  HIS  STARVING  COUNTRYMEN  AND  NOW  NEEDS  TO  GET  IT  OUT  OF  THE  COUNTRY...“  

  Scammers  are  seeking  an  accomplice  to  transfer  funds  and  you  will  get  the  cut  –  10%  

  But  before  transfer  can  be  finalized  you  must  pay  for  unnecessary  advance  fees  

  What  actual  happen  

  There  is  no  minister  and  no  money  

  Except  the  money  vicQm  have  put  in  advance        

  The  Risk  

  Serious  financial  loss  or  worse  

  Losing  Qme  and  could  probably  threaten      

20

Page 21: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Case Study : Fraud Site

+ Lottery/Sweepstake Scams

  The  Setup  

  Selling  product  or  services  to  potenQal  vicQm  

  Company  not  legally  registered  

  Perpetrated  via  mail  which  contain  colorful  brochure  or  scratch  card  

  What  actual  happen  

  One  of  the  card  always  a  winning  card    

  To  claim  price  always  asked  to  provide  payment  for  various  fees  via  wire  transfer        

  The  Risk  

  Serious  financial  loss    

  Losing  Qme    

21

Page 22: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

22

Page 23: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

What We Are Seeing

Page 24: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

The Source of all A Lot of Evil

•  Information Loss •  Financial Loss •  Badness

– Denial of Service Attacks

•  Your PC might be hosting malware or serving malware

Page 25: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Malware Research Centre

•  Malware Response since 1997 –  Infected Machines feeds

– Command and Control take downs / Monitoring

– Removing evilness* from servers/sites – Tracking and Analysis – Advisory and Alerts

– “I think I got something in My PC” requests – Malware samples & Feed Exchange

Page 26: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Malware Incident 2011

26

Page 27: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Malware Research Centre (MRC)

Emerging  Threats  

LebahNet  Project   Malware  

Research  

Threats  VisualizaNon   Advisory  &  

Alerts    

EXPLOIT

Projects/Activities

Malware Sandbox

PDF Analyzer

AntiPhishing Plugin

AntiPhishing Portal

Malicious PHP Analyzer

.My Malware Project

PHP WebApp IPS

DNS  Watch  –    Site  detecQon  

Page 28: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

(FREE) Tools from the Lab

DontPhishMe!

More at http://www.mycert.org.my/en/resources/security_tools/main/main/detail/768/index.html  

DNSWatch PKaji

28

Page 29: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

29  

Dontphishme: Plugin for Firefox and Chrome

Mozilla  Add-­‐On:  hYps://addons.mozilla.org/en-­‐us/firefox/addon/dontphishme/  

Chrome  Add-­‐On:  hYps://chrome.google.com/webstore/detail/ekhmajimailppllbglbkopdjfenocpnl  

Currently  support  local  Financial  InsQtuion  /  Bank  at  Malaysia    

Page 30: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

30

Page 31: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate
Page 32: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

DNSWatch (Service)

•  Released in August 2011 as a service •  Started initially as a different project (DNSMon)

as a result of monitoring conficker infected clients querying known_malicious_dns

•  What do we do with a list of known ‘bad’ URLs? –  From honeypots and other public/non-public sources

•  We offer a DNS Service, when users visit a potentially malicious site that has been blacklisted, redirect to a landing page – This will alert and hopefully get user curious enough

to fix the problem

Page 33: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate
Page 34: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

DNSChanger Malware Cleanup

•  What is DNSChanger –  malware that infect computers with the purpose of

diverting traffic to potentially illegal and malicious websites. The malware modifies the infected computer's DNS server setting replacing it with DNS server belonging to the attackers.

•  MyCERT Advisory –  http://www.mycert.org.my/en/services/advisories/mycert/

2012/main/detail/855/index.html

34

Page 35: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

•  Detection (http://dnschanger.detect.my)

•  Removal Step available at MyCERT website

http://www.mycert.org.my/en/resources/security_tools/main/main/detail/854/index.html

35

DNSChanger Malware Cleanup

Page 36: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

36

DNSChanger Malware Cleaning

Page 37: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

0  

1000  

2000  

3000  

4000  

5000  

6000  

7000  

8000  

DNS  Changer:  IP  Addresses  Count  –  Based  on  Reports  from  Shadow  Server  FoundaNon  

IP  addresses  

Page 38: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Awareness •  CyberSAFE Project

– Cyber Security Awareness for Everyone – http://www.cybersafe.my

•  Addresses amongst other things, Phishing and ID Theft issues

•  Engagement with Media and Public to promote the message

•  Production of educational materials (feel free to re-use)

38

Page 39: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Publish Advisory / Alert / News •  Came out with advisory “MA-228.042010:MyCERT Advisory - Phishing Attempts Targeting Public

Bank Malaysia Users” http://www.mycert.org.my/en/services/advisories/mycert/2010/main/

detail/749/index.html “MA-276.042011:MyCERT Alert – Job Scam On the Net”

http://www.mycert.org.my/en/services/advisories/mycert/2011/main/detail/815/index.html

•  Publish newspaper article “Steer clear of phishing sites”

http://thestar.com.my/news/story.asp?file=/2010/4/21/focus/6095783&sec=focus

39  

Page 40: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Mode of Incident Reporting

  Email  o  [email protected]

  Phone/Hotline  

o  +603 8992 6969 o  1 300 88 2999

  Fax  o  +603 8945 3442

  SMS  

o  15888 “Cyber999 Report”   Mobile  (24x7)  

o  +6019 266 5850   Online  –  hYp://www.mycert.org.my  

  Walk  In  -­‐  Office  Hours:  MYT  0830  –  1730  

40

Page 41: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Success and Challenges (1) •  A “1-Stop-Centre” work to a certain extent.

Incidents experienced by Public and Private Organizations and Individuals provided the bigger picture for the stakeholders

•  Cost savings is there but no hard data •  End-to-end resolution is challenging both locally

and internationally. Often stops at escalation and does not translate to prosecution (or money returned in the case of Fraud)

41

Page 42: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Success and Challenges (2) •  Being able to focus allow expertise to be

developed. The CERT were able to release tools and services to deal with problem of the day –  i.e. DontPhishMe!, PDF Analyzer, LebahnetMini

(Honeypot)

•  Lessons learned can be translated into awareness materials. But how do we measure the state of awareness? Number of incidents keep to continue – See www.cybersafe.my

42

Page 43: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

Conclusion •  Security incidents happen! •  Managing security incidents is critical both at the

enterprise, country and global level

•  Having a dedicated team to handle incidents will ensure that potential damaged is contained and lessons can applied for improvements to steer other initiatives

43

Page 44: Responding to Security Incident: MyCERT approach and case ...threats – i.e. malware, phishing, targeted attack, cyber harassment and more ! • Incident data created awareness, generate

44


Phishing Spear Phishing - ASSP Region I€¦ · Phishing& Spear Phishing attacks are similar -key differences: •Phishingcampaign -very broad and automated, think 'spray & pray’

Phishing Spear Phishing - ASSP Region I€¦ · Phishing& Spear Phishing attacks are similar -key differences: •Phishingcampaign -very broad and automated, think 'spray & pray’

Phishing - 123seminarsonly.com · 2012-03-02 · Phone (Voice) Phishing • Not all phishing attacks require a fake website. • In an incident in 2006, messages that claimed to be

Phishing - 123seminarsonly.com · 2012-03-02 · Phone (Voice) Phishing • Not all phishing attacks require a fake website. • In an incident in 2006, messages that claimed to be

Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Presentazione di PowerPoint · 2014: Steel mill incident – Spear phishing leads to compromise of corporate network – Pivot into plant network – Exploitation phase (compromise

Combating Phishing: A Proactive Approach Phishing... · COMBATING PHISHING: A PROACTIVE APPROACH | 4 Phishing: on the rise and more sophisticated As a well-known and trusted brand,

Combating Phishing: A Proactive Approach Phishing... · COMBATING PHISHING: A PROACTIVE APPROACH | 4 Phishing: on the rise and more sophisticated As a well-known and trusted brand,

Phishing Email Attacks - AVAREN ITfor spear phishing attacks. Spear phishing is nearly identical to standard email . phishing – except it is more targeted. Rather than sending the

Phishing Email Attacks - AVAREN ITfor spear phishing attacks. Spear phishing is nearly identical to standard email . phishing – except it is more targeted. Rather than sending the

PHISHING By, Himanshu Mishra Parrag Mehta. OUTLINE What is Phishing ? Phishing Techniques Message Delivery Effects of Phishing Anti-Phishing Techniques.

PHISHING By, Himanshu Mishra Parrag Mehta. OUTLINE What is Phishing ? Phishing Techniques Message Delivery Effects of Phishing Anti-Phishing Techniques.

Detecting a Phishing Attack with Phishing Intelligence ... · Detecting a Phishing Attack with Phishing Intelligence Engine (PIE) 1 Phishing Statistics: What Every Business Needs

Detecting a Phishing Attack with Phishing Intelligence ... · Detecting a Phishing Attack with Phishing Intelligence Engine (PIE) 1 Phishing Statistics: What Every Business Needs

SPEAR PHISHING - dandh.com...SPEAR PHISHING VS PHISHING Spear phishing and phishing attacks both leverage impersonation to commit fraud. The difference between the two is that spear

SPEAR PHISHING - dandh.com...SPEAR PHISHING VS PHISHING Spear phishing and phishing attacks both leverage impersonation to commit fraud. The difference between the two is that spear

DAG 4 – INCIDENTEN EN CONTINUITEIT · Incident 4: Gerichte aanval via phishing mail Belgcaom techies Incident 5: Internet onbeschikbaar wegens storing Telenet Detecteren, identificeren,

DAG 4 – INCIDENTEN EN CONTINUITEIT · Incident 4: Gerichte aanval via phishing mail Belgcaom techies Incident 5: Internet onbeschikbaar wegens storing Telenet Detecteren, identificeren,

Phishing - Fred 151 · 2020-03-21 · di Phishing. 2 Identificare Come riconoscere il Phishing. Cosa fare se siamo vittime di Phishing 3 Esempi Esempi di email di Phishing. 4 Test

Phishing - Fred 151 · 2020-03-21 · di Phishing. 2 Identificare Come riconoscere il Phishing. Cosa fare se siamo vittime di Phishing 3 Esempi Esempi di email di Phishing. 4 Test

Phishing Incident Response · attacks just in the last several months. As of March 31, 2016, PhishMe found that 93 percent of all phishing emails analyzed contained encryption ransomware,⁴

Phishing Incident Response · attacks just in the last several months. As of March 31, 2016, PhishMe found that 93 percent of all phishing emails analyzed contained encryption ransomware,⁴

Why phishing still works: user strategies for combating phishing … · 2020. 9. 23. · Why phishing still works: user strategies for combating phishing attacks Mohamed Alsharnouby,

Why phishing still works: user strategies for combating phishing … · 2020. 9. 23. · Why phishing still works: user strategies for combating phishing attacks Mohamed Alsharnouby,

Phishing the Web · Phishing the web / Peter Panter / 20041227 Introduction to the „Phishing“ phenomenon Word Origin • Roots of the word „phishing“ derive from „fishing“,

Phishing the Web · Phishing the web / Peter Panter / 20041227 Introduction to the „Phishing“ phenomenon Word Origin • Roots of the word „phishing“ derive from „fishing“,

JPCERT/CC Incident Handling Report [January 1, 2020 ... · 3.1. Phishing Site Trends . 3,839 reports on phishing sites were received in this quarter, representing a 4% increase from

JPCERT/CC Incident Handling Report [January 1, 2020 ... · 3.1. Phishing Site Trends . 3,839 reports on phishing sites were received in this quarter, representing a 4% increase from

Phishing Incident Response - cofense.com · Phishing Incident Response 3 Introduction Phishing attacks arguably are the most persistent—and pernicious— cyberattacks that organizations

Phishing Incident Response - cofense.com · Phishing Incident Response 3 Introduction Phishing attacks arguably are the most persistent—and pernicious— cyberattacks that organizations

Phishing Incident Responsecofense.com/wp-content/uploads/2017/10/Phishing_Incident... · 2020-07-30 · Phishing Activity Trends Report, 1st Quarter 2016. (APWG, 2016) ³ Symantec,

Phishing Incident Responsecofense.com/wp-content/uploads/2017/10/Phishing_Incident... · 2020-07-30 · Phishing Activity Trends Report, 1st Quarter 2016. (APWG, 2016) ³ Symantec,

Phishing & Spear Phishing - info.vadesecure.com Marketing Website... · Phishing Spear Phishing Understanding an Emerging Threat to Healthcare Organizations 5 vadesecure.com How Phishing

Phishing & Spear Phishing - info.vadesecure.com Marketing Website... · Phishing Spear Phishing Understanding an Emerging Threat to Healthcare Organizations 5 vadesecure.com How Phishing

Cyber Incident Response Plans and Resources Thursday ... · dealer websites, phishing, business email compromise scams, mobile security risks, cloud security and branch office risks.

Cyber Incident Response Plans and Resources Thursday ... · dealer websites, phishing, business email compromise scams, mobile security risks, cloud security and branch office risks.

UNCLASSIFIED//FOUO DoD Spear-Phishing Awareness Training · Spear Phishing is a GREATER threat!!! Spear Phishing is a highly targeted phishing attempt. The attacker selectively chooses

UNCLASSIFIED//FOUO DoD Spear-Phishing Awareness Training · Spear Phishing is a GREATER threat!!! Spear Phishing is a highly targeted phishing attempt. The attacker selectively chooses

Phishing and Trust. Agenda Questions? Questions? Phishing Phishing Project feedback Project feedback Trust Trust.

Phishing and Trust. Agenda Questions? Questions? Phishing Phishing Project feedback Project feedback Trust Trust.