

A phishing simulation done by Kaspersky reinforced how cybercriminals trick employees into clicking malicious mails.



With nine out of ten employees needing basic cybersecurity skills training, cybercriminals know that the workforce remains a loophole they can exploit easily to launch a cyberattack against a company,” said Yeo Siang Tiong, general manager for Southeast Asia at Kaspersky.Īs reported, phishing email is usually the first chapter of 91% of all cyberattacks. Social engineering attack is dubbed as hacking of the human mind. Phishing is a type of social engineering attack. “It’s interesting to see companies being targeted by financial phishing but we have to remember here that businesses, at their core, are still made up of humans. Thailand logged 101,461 phishing attempts related to finances, followed by the Philippines with 52,914, and Singapore with 22,109. Vietnam comes as a second close with 172,694, and Malaysia recorded 120,656. Indonesia chalked up the highest number of financial phishing incidents (208,238). E-shops refer to online stores and auction sites like Amazon, the Apple Store, Steam, eBay etc. Payment system phishing includes pages impersonating well-known payment brands, such as PayPal, MasterCard, American Express, Visa and others. In this case, “financial phishing” refers not only to banking-specific phishing but also payment systems and e-shops. It’s usually built around an inherently simple scheme: using carefully crafted emails or notifications that mimic messages from banks, government organizations, entertainment platforms – really any service – cybercriminals can trick users into following a link to a fraudulent website and giving up their payment or personal details or even downloading malicious programs, the company said. The company further said from SMEs to large enterprises, financial phishers kept trying to infect businesses in the region last year.
