Name: The Art of Polymorphic Phishing Attacks – Are You Ready to Respond?
Start: 2020-07-08T06:00:00Z
End: 2020-07-08T06:01:03.000Z
Location: BrightTALK
Rating: 4

Cofense® provides the world’s most effective business email threat detection and remediation solutions. PhishMe® Employee Security Awareness Training with Risk Validation and the Cofense Phishing Detection and Response (PDR) Platform are powered by over 35 million Cofense-trained employees who report phishing and other dangerous email threats in real time. Exclusive to Cofense, our network detects and eradicates threats other email security systems miss and removes them from our customers’ inboxes. For more information, visit cofense.com or connect with Cofense on X and LinkedIn. 

Listen in as Cofense’s cyber threat intelligence analysts walk through email security trends and findings in Q2 2024. Gain valuable information to help you stay better informed about threats targeting enterprise environments so that you can better protect and defend your organization.

Q2 2024 Cofense Phishing Intelligence Trends Review Briefing

Listen in as Cofense’s cyber threat intelligence analysts walk through email security trends and findings in Q1 2024. Gain valuable information to help you stay better informed about threats targeting enterprise environments so that you can better protect and defend your organization.
Watch on-demand to learn about these trends and more:
• Active Threat Reports (ATRs) related to taxes increased by 314% and those with a benefits theme increased by 644%
• Web3 Services used in phishing campaigns increased by 423% in Q1 2024 over Q4 2023.
• The most popular RAT from Q4 2023, Remcos RAT, was replaced in Q1 2024 by STR RAT with almost 403% more emails.
These are just a few of the key trends the team explored. The knowledge and expertise shared in this webinar are indispensable for any individual or organization seeking to stay ahead of the ever-changing cyber threat landscape.
Take a proactive stance against email-based attacks with these insights.

Q1 2024 Cofense Phishing Intelligence Trends Review Briefing

Cybersecurity threats continue to increase in frequency, intensity, and sophistication – with the majority of breaches beginning with a phishing email.
Listen in as our email secuity experts unveil the newest research and analysis on the active security threats targeting your business and what you can do to protect your organization.
Key topics include: 
• Email security threat trends from the last 12 months
• Emerging tactics, like QR codes and vishing, plus detail on the BEC, ransomware and cred theft scams that bypass traditional email security solutions
• DarkGate, PikaBot, and other top malware families to watch in 2024
• The drivers of the phishing threat landscape – from worldwide events to the biggest breaches and takedowns

2024 Annual State of Email Security

Register to hear from our product experts about the key enhancements to our Security Awareness Training and Phishing Detection and Response (PDR) solutions designed to keep you steps ahead of cybercriminals including: 

Being among the first to see our cutting-edge email security Product Roadmap based on your feedback. 

Learning how to leverage our latest enhancements to strengthen your defenses against cyber crime. 

Discovering new Cofense Awareness Training to help your employees spot and neutralize sophisticated phishing attempts. 

Hearing about enhancements coming to Cofense PDR that will allow you to identify and remediate threats faster and more efficiently.

Unlock the Future of Email Security: Customer Product Roadmap Insights Webinar

A strong cybersecurity posture built for the post-pandemic era will rely heavily on the ability of security and risk leaders to plan strategically. With 90% of attacks on organizations starting in email - email security will be top of mind for CISO's and their teams, especially as we head into a year of economic uncertainty.  
  
Cofense Executives and email security experts have identified some of the top email security challenges CISO's and email security teams need to consider and prepare for in order to bolster security posture, keep their organizations secure, and stay ahead of a breach in 2023.  
  
Arm yourself with these expert insights by watching this forward-thinking on-demand discussion on the future email security landscape. Hear about these phishing threat predictions and trends for 2023 among others:  
  
• Cybersecurity will NOT be immune to the recession 
• Despite economic uncertainty, CISO's won't compromise on email and endpoint security investments 
• Why mass consolidation across email security will lead to an increase in attacks 
• Security posture will be in the spotlight as cyber insurance providers look at an organization’s ""bloodwork"" to underwrite policies  
• Ransomware will see a new boom as tensions between Russia and Ukraine continue 
• Romance scams and business email compromise will continue to run rampant

Staying Ahead of a Breach in Uncertain Times: 2023 Predications

Business Email Compromise (BEC) has disastrous consequences for victims – from financial losses due to fraudulent payments, stolen proprietary information and extortion demands, to reputation damage resulting from compromised business systems.
Watch and learn as United States Secret Service personnel from the Secret Service’s Global Investigative Operations Center (GIOC) give a briefing on Business Email Compromise trends in 2023. They discuss the evolving overarching scheme of BEC and how it connects to other criminal activity, emerging tactics, and a profile on a recent case. This briefing also provides an incident response roadmap for when a BEC is encountered.
Real facts about Business Email Compromise:
• BEC is the #1 cybercrime for financial loss 7 years running
• $400 Billion lost so far to BEC
• More than 70% of organizations have experienced a BEC attack
• Email remains the number one vector for malware delivery
Guest Speakers:
Abigail Tyrell (CID)-Special Agent-USSS Global Investigative Operations Center
Stephen Dougherty (CID)- Financial Investigator/Forensic Analyst-USSS Global Investigative Operations Center
Michael Johns- Director of Private and Public Sector Outreach for Cyber Security- US Secret Service

Become a Special Agent for BEC

As we move further into 2023, the ongoing threat of phishing attacks are still leaving organizations and end users susceptible to significant cybersecurity risks. With 90% of attacks on organizations starting in email, phishing security and a strategic cybersecurity posture is imperative for CISO's and their teams, especially as we head into a year of economic uncertainty.
Watch this on-demand webinar as we examine the phishing lifecycle and how you can build a resilient approach to phishing defense and how to develop the correct cyber infrastructure to stay ahead of a breach in 2023.

Protecting your Organization from Phishing Attacks in 2023

As the threat landscape evolve, threat actors find more ways to bypass standard email security solutions. Your team needs the resources that can enable them to identify, protect, detect, and respond. Learn how you can enhance your email security and keep your organization protected from today’s most advanced threats.

How to Enhance you Email Security
As the threat landscape evolve, threat actors find more ways to bypass standard email security solutions. Your team needs the resources that can enable them to identify, protect, detect, and respond. Learn how you can enhance your email security and keep your organization protected from today’s most advanced threats.

How to Protect Your Organization from Today's Top Threats (APAC)

With the increasing use of technology and digital communication, email security has become a top concern for organizations. With email being the #1 attack vector for cyber threats and most breaches involving the human element, the need for a strong cybersecurity posture and strategic planning by security and risk leaders has never been greater. 

To help CISOs and email security teams stay ahead of potential breaches and bolster their security infrastructure and training protocols, Cofense has identified some of the top email security challenges to watch out for in 2024.  

Take charge of your online security by joining this eye-opening discussion with our email security experts. They will unravel the ever-evolving landscape of email security and delve into the fascinating realm of phishing threat predictions and emerging trends for 2024.

Watch now on-demand to hear more about these predictions and others:  

Threat actors will capitalize on the advancement of AI, ML and ChatGPT through malicious emails.  
Malicious QR Codes are just getting started.  
The cybersecurity threat landscape will intensify as social engineering attacks surge. 
A new malware family will fill the void left behind by Qakbot.

New Email Threats on the Horizon: AI, Malicious QR Codes

October 2023 marks 20 years of Cybersecurity Awareness Month, but did you know that the Committee for Economic Development reported that an estimated 94 percent of businesses larger than 100 employees experienced a cyberattack in 2022 and organizations have experienced an 81 percent increase in cyber threats since the start of the pandemic? They also reported that the global cost of cybercrime is predicted to hit $8 trillion in 2023 and grow to $10.5 trillion by 2025. Human error remained the most common and effective threat vector, responsible for 82 percent of data breaches in 2022.

Watch our recent Cybersecurity Awareness Month webinar on-demand to learn:

Best practices used to develop an email security program that includes positive reinforcement, real-life simulation, and a culture where employees embrace their important role in defending the organization.
Where and what technology to deploy to help lighten the load of your SOC analysts through automation.
Why content and having a variety of content types is important.
How to leverage the community of other like-minded organizations to prevent future attacks to your organization.
How to report up through senior leadership progress and return on investment.

Cybersecurity Awareness Month 2023

"As the use of smartphones continues to increase, so does the risk of falling victim to phishing scams. One type of phishing threat that has become increasingly prevalent is known as QR code phishing. In fact, we have seen a more than 2,400% increase in QR code phishing emails in recent months.
Cybercriminals are drawn to QR code phishing due to its effectiveness and simplicity. This method disguises malicious links behind seemingly harmless QR codes, which when scanned, lead to fraudulent websites designed to steal user information. The ubiquitousness of QR codes, especially in a post-pandemic world where touchless interactions are preferred, makes them an ideal camouflage for malicious intent. Furthermore, as scanning a QR code requires less caution from users compared to clicking on an unknown link, it increases the chances of a successful attack.
Educating employees about the dangers of QR code phishing is of paramount importance in the digital age. Regular security awareness training can equip employees with the skills and knowledge to identify suspicious QR codes and avoid scanning them. With a thorough understanding of these threats, they can act as the first line of defense against such attacks.
Listen in to learn more about this growing cyber threat:
• The current state of phishing
• How QR codes fit into today’s threat landscape
• A real-world example of an organization defending against a QR code phishing attack
• How to condition your employees to identify and report this growing threat"

Unmask QR Code Phishing Threats: Empower Your Employees

Businesses of all sizes are vulnerable to email-based threats like BEC, credential phishing, and ransomware attacks. Traditional email security solutions are not enough to stop today’s most advanced threats. This is why Cofense is 100% focused on building solutions for our customers to tackle those threats and stay one step ahead of the bad actors. Discussion topics include:

1. What makes a best of breed email security solution 
2. How to ensure your users are resilient 
3. The role threat reporting plays in email security 
4. Why auto quarantine is changing the game 
5. How to leverage Cofense Threat Intelligence feeds

Strengthening Your Business Email Security: A Roadmap to Protecting Your Data

In 2022 Cofense detected a 569% increase of malicious phishing emails; that’s 1 every 2 minutes that bypassed a Secure Email Gateway (SEG). This is a staggering figure impacting the volume of threats sat in SOC work queues and potentially employee inboxes; a problem compounded post pandemic with reduced headcount, budgets, growing skillsgap and maintained remote working. 
Watch this insightful on-demand webinar where Cofense’s Juergen Petzendorfer will be joined by Jeremy Voisin, CISO of DFI, to look at how organisations can maintain control of their security operations despite increasing pressures and reduced resources.  
We’ll take a deep dive into some of the challenges we know SOC teams are facing, and learn:
1. Some of the latest trends seen in email security from 2022 
2. How to balance increased financial pressure with the growing security skills shortage 
3. To outsource or not to outsource – what are the options 
4. The importance of leveraging crowd source intelligence   
5. How to gain more clarity, visibility and speed to your security controls with less

The Balancing Act: Financial Pressures Vs Skillset Shortages

Listen in as Cofense's Cyber Threat Intelligence Analysts walk through the key phishing tactics and trends observed during Q2. 
Watch on-demand to hear more about: 
• How a threat actor's mistake enabled us to track a large, evasive phishing campaign
• The markers that can be used to protect against the increasing number of man-in-the-middle phishing attacks
• Why embedded URLs in phishing emails are primarily using compromised domains
The knowledge and expertise shared in this webinar are indispensable for any individual or organization seeking to stay ahead of the ever-changing cyber threat landscape and taking a proactive stance against email-based attacks.

Q2 2023 Cofense Phishing Intelligence Trends Review Briefing

Listen in as Cofense’s Cyber Threat Intelligence Analysts walk through the key trends observed in email security in Q3 2023. 
Watch now and learn more about these trends and more:
• QR Codes embedded in images and PDFs within phishing emails rose.
• Credential Phishing indicators of compromise (IOCs) increased by nearly 45%.
• An increase in reconnaissance and utility tool malware appeared this quarter, like Browser Password Dump Utility Email Password Dump Utility.
The knowledge and expertise shared in this webinar are indispensable for any individual or organization seeking to stay ahead of the ever-changing cyber threat landscape. Get the insights you need to take a proactive stance against email-based attacks.

Q3 2023 Cofense Phishing Intelligence Trends Review Briefing

Ever received a suspicious sounding email from "your CEO" or "the finance department" asking you to call a phone number back to immediately address a concern? If so, you may have been Vished!
 
In a Vishing attack, hackers compel employees via email to call a phone number, and then use creative messages in a voice recording to steal sensitive information. A Vishing attack may try to trick employees into giving up passwords, logins, or other sensitive data, and the big problem is – Vishing works and exposes a business to a breach!
 
It’s essential for employees to be well-informed about Vishing and take appropriate measures to protect your organization from this threat. Join Cofense Vishing experts on January 24th, 2024 @ 11AM ET as we dial into this escalating threat. You’ll learn:
 
How vishing has evolved to a hybrid threat that includes both email and phone calls
Why vishing threats are so successful at evading existing email security controls
How to train your employees to recognize and report this escalating threat to keep your organization protected

Dialing into Vishing:Defend Against this Escalating Threat

If we learned anything from 2020, it’s that threat actors’ abilities to quickly adjust their methods to world events can be lightning fast. From Emotet to Ryuk, and let’s not forget COVID-19, Cofense and our Cofense Labs and Intelligence teams worked overtime.

In our Annual State of Phishing Report we discussed how 2020 saw an increase in both volume and variety of threat activity. Threat actors continued to advance their tactics, techniques, and procedures to ensure their emails would reach end users throughout the year.

Join Cofense CTO & Co-Founder, Aaron Higbee, and Security Solutions Advisor, Tonia Dudley, as they dive into the details of what malware phishing attacks kept the Cofense team busy and what we might see this year.

You'll learn: 

  - Why empowering your people to detect & report phish is more important than ever
   - The latest tactics being used by threat actors that are making it into your users' inboxes
   - How to continuously protect your business from costly phishing attacks

Protect Against Malware Phishing Campaigns that Continue to Evolve and Innovate

Rapid phishing detection and response has never mattered more.  Our Annual State of Phishing Report is a comprehensive view of the 2020 phishing threat landscape, threat actors, and more.

Watch the on-demand webcast recently held by Cofense experts, Tonia Dudley, Cofense Strategic Advisor and Aaron Higbee, Cofense Chief Technology Officer as they share what they’ve learned about phishing, phishing attacks, threat actors, malware, and secure email gateways.

Learn how:

  - Attackers are diversifying the malware used in phishing campaigns
  - The COVID-19 pandemic reshaped the phishing landscape
  - Threat actors are finding new ways to monetize phishing
  - You can't stop human attackers without human reporting and analysis

2021 State of Phishing Webinar

Leveraging Human Sensors to Detect and Remediate Phishing Attacks in Minutes

As businesses adjusts to having their employees work from home, they are also working hard to support it. However, new working conditions has opened up new security gaps that challenge the status quo and questions the business’s resiliency to defend against polymorphic phishing attacks. The changing face of phishing emails continuing to evade Secure Email Gateways has threat actors adapting their tactics to exploit businesses who are unprepared.

Are you ready to accelerate your security practice to respond to these types of attacks?  

Join Cofense security expert Ryan Jones and (ISC)² on Jul 8, 2020 (Wed) at 14:00 (GMT +8) for an in-depth review of the current phishing threat landscape, as seen through the eyes of those on the front line – your end users. 

Highlights will include:
• Insights into the porous nature of SEGs and the latest tactics and techniques delivering credential phish and malware today
• How to identify and defend against polymorphic phishing emails within a remote environment
• Strategies and tools to adopt that will strengthen your security practices and reduce the workload of your SOC teams

Presenter: Ryan Jones, Principal Sales Engineer, APAC, Cofense
Moderator: Tony Vizza, CISSP, CCSP, Director of Cybersecurity Advocacy, APAC, (ISC)²

The Art of Polymorphic Phishing Attacks – Are You Ready to Respond?

Cyber Security

Phishing

Cyber Attacks

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Art of Polymorphic Phishing Attacks – Are You Ready to Respond?

Presented by

About this talk

Cofense