Naked Security Topic: Phishing tricks that really work – and how to avoid them

We are seeing quite a few more Phishing Scams the past couple of months and some of them are really hard to tell if they are the real thing or just another SCAM!

This article in Naked Security from Sophos approaches this discussion from a different direction because it comes from some of the Phish Threat creators over at Sophos. Take a look!

Sorry if you missed the Sophos Rise Over Ransomeware event yesterday

There was a good turnout yesterday at the Cranberry/Pittsburgh event. Sophos presented a lot of good information to everyone that attended about the state of the Sophos products and the story behind the Synchronized Security Solution.

Sophos Phish Threat Protection–Whitepaper

It is now surprise that Phishing attacks have caused issues with a whole lot of people. Whether it is from “The Microsoft Service Department” wanting to help you get rid of unwanted malware by signing on to your computer to get a quick look and run their special software… to the IRS scams with the caller wanting you to satisfy your unknown tax bill or there will be agents coming to take you away. They are coming at us from all directions. Some are subtle and most are real sneaky. How do we test our organization to see if we are prepared and educated to be aware of these attacks so that we are not succumbed by them? How do we get trained to understand what we should be wary of?

Sophos has an answer for you. Their brand new Phish Threat Protection service that allows you to setup campaigns to both train and test your employees. It is reasonably priced and is a good source for keeping your people on their toes. What is your weakest link in your organization? The People.

Take a look at this whitepaper: Don’t Take the Bait and learn more about protecting your company today.

Sophos Phish Threat Overview

The weakest link in a company's cyber-defenses? People! Sophos Phish Threat teaches end users to spot phony phishing messages with a series of simulated attack emails and easy-to-deploy training campaigns.

Sophos Phish Threat Overview from Sophos on Vimeo.

Sophos Phish Threat Product

Another reason that Sophos is such a great security solution company is this new product that helps you assess your vulnerabilities and help you train your employees on what they should be aware of to protect themselves and your company from Phishing attempts. Sophos says about this problem:

From our continuous assessment of the threat landscape, two things are abundantly clear: first, that email is one of the most problematic sources of infection; and second, it’s the ordinary, well-meaning people who often let poisonous emails into their organizations.

It’s easy to be tricked into clicking on a malicious email. So wouldn’t it be great to create a culture where the first instinct of each user was to think twice — even if just for a moment — before clicking on links, downloading attachments or running software that arrived via email? Think of how many threats could be neutralized before they even have a chance to make their way on to corporate networks.

So we’re excited to be able to help create that culture by announcing Sophos Phish Threat, a phishing attack simulator that’s powerful, thoughtful and very easy to use. You’ll be up and running in minutes, with campaigns to help your users learn to spot phishing links, dangerous attachments, and bogus scripts meant to cripple your organization before they have a chance to do harm.

Simply choose a campaign type, select one or more training modules, pick a simulated phishing message, and decide which users to test. Then sit back as the results roll in: top-notch reporting tells you how many messages have been sent out, who’s clicked, and, of those, who’s gone through the required modules. It couldn’t be easier.

Here’s a quick video overview of the product:

Getting Started With Sophos Phish Threat from Sophos on Vimeo.