Employees still falling for phishing scams

One third of employees are still likely to fall victim to phishing attacks, risking their company’s entire network security, it has been found.

The figures come from Duo Security via one of its free tools, which it launched at the time of RSA conference in March 2016. 11,542 employees across 400 companies were put to the test by their IT teams, which sent out “phishing emails” to see who would fall for the trick. Of those recipients, 31% opened the link contained in the email – behaviour that, were it a real phishing email rather than a dummy one, could cause a data breach at the company they work for.

The fact that only a minority fell for the “scam”, with two-thirds of those tested recognising the link as potentially malicious, isn’t the point, according to Jordan Wright, R&D engineer at Duo Security.

Link to article