The day started out just like any other workday for Thomas. He drove in to work, flashed his badge to the security guard at the front desk, said hello to his desk neighbor and settled in at his workstation to address a backlog of emails in his inbox. That’s when things went sideways.
A message from a vendor. A companywide announcement. Yet another “reply all” to an ongoing email thread. This morning’s emails were nothing out of the ordinary. Then a strange email caught Thomas’ eye: a request from corporate IT, asking him to update his company profile, including his date of birth, social security number, employee ID and account password.
With a pile of work to do, an all-hands meeting coming up in a few minutes and a million other things on his mind, Thomas clicked the link in the email and complied with request from IT. Having completed the task, he moved on with his busy day without a second thought. Little did he know that he had just joined countless other victims of the most widespread form of cyberattack: the phishing email.
According to Verizon’s 2021 Data Breach Investigation Report, 85% of cyberattacks last year included a human element. It is typically easier to trick a person than it is to bypass, break or hack a computer system. When cyber-criminals are planning their attack, the path of least resistance often leads them to target human weakness.
Thomas is not a bad employee. He has never clicked a phishing email before and is a stellar performer. He has...
Read Full Story:
https://masslawyersweekly.com/2022/01/18/educate-your-employees-on-easy-ways-...