[clug] [OT] FireEye on Email Attacks - only 1/3 via attachments, 1 in 6 use malware

[steve jenkin]

After the recent reveal that ANU was compromised by a well targeted spear phising attack, I found this infographic ‘illuminating’.

While “Microsoft Users” are more heavily targeted and rate of increase in attacks has recently approx doubled each quarter,
“not Microsoft” isn’t the defence it once was.

FireEye is the company that took over Mandiant, the firm that disclosed the first APT report in 2013.
While they sell security services, freely releasing reports and infographics is generous on their part - not something they have to do.

==================

The 3 Ts of An Email Attack:TACTICS, TECHNIQUES, TARGETS
© 2019 FireEye, Inc.

Attackers constantly adapt their tactics, techniques and targets to get past email security defenses. 
The following trends and data,
distilled from 2.2 billion+ emails from April-June 2019,
can help you better prepare for attacks by showing you what to expect.

<https://content.fireeye.com/one-email/ig-the-3-ts-of-email-attacks>
	86% of email attacks are malwareless
	Malwareless = Impersonation attacks, CEO fraud, spear phishing

	62% URL-based attacks
	38% Attachment-based attack

	181% Increase in Microsoft-based phishing attacks from Q1 to Q2 2019
--
Steve Jenkin, IT Systems and Design 
0412 786 915 (+61 412 786 915)
PO Box 38, Kippax ACT 2615, AUSTRALIA

mailto:sjenkin at canb.auug.org.au http://members.tip.net.au/~sjenkin