1 of 15

How good is your Password?

Test it.

Are you safe?

https://www.security.org/how-secure-is-my-password/

2 of 15

EdTech Conference

2024

“Dear valued customer,”

You have been Phished!

By: Sarah and Malie Tupou

3 of 15

Objective:

Identifying phishing scams, thus preventing you from being phished!

4 of 15

The Facts

2013 - Cryptolocker ransomware infected 250,000 personal computers

According to Microsoft, some of the innovative ways they’ve seen phishing attacks evolve so far in 2020 include: Pointing email links to fake Google search results that point to attacker-controlled malware-laden websites, pointing email links to non-existent pages on an attacker-controlled website so that a custom 404 page is presented that can be used to mimic logon pages for legitimate sites, spoofing company-specific Office 365 sign-in pages to look so realistic that users would think it's the real thing.

3.4 billion phishing emails daily	83% of companies experience phishing attacks	36% of all data breaches involve phishing	every 11 sec phishing attack

https://www.getastra.com/blog/security-audit/phishing-attack-statistics/

5 of 15

Here are the top most intriguing recent phishing attacks statistics you should be aware of in 2024.

3.

55% of phishing websites use targeted brand names to capture sensitive information with ease according to the F5 Labs Phishing and Fraud Report of 2020.

2.

84% of US-based organizations have stated that conducting regular security awareness training has helped reduce the rate at which employees fall prey to phishing attacks.

92% of Australian organizations suffered a successful phishing attack, showing a 53% increase from the year 2021.

4.

Highly impersonated brands for phishing are Amazon and Google at 13%, Facebook and Whatsapp at 9%, and Netflix and Apple at 2%.

5.

Breaches caused by phishing took the third longest mean time to identify and contain at 295 days according to IBM’s 2022 Data Breach Report.

6 of 15

What is Phishing? What can happen if you are phished?

Personal phishing risks include:

Money stolen from your bank account
Fraudulent charges on credit cards
Lost access to photos, videos, and files
Fake social media posts made in your accounts
Cybercriminals impersonating you, putting friends or family members at risk

At work, phishing risks include:

Loss of corporate funds
Exposing personal information of partners, coworkers, and customers
Files becoming locked and inaccessible
Damage to your organization's reputation

https://www.cisco.com/c/en/us/products/security/email-security/what-is-phishing.html#~ai-and-phishing

7 of 15

Phishing Techniques

4 techniques commonly used when phishing

Session Hijacking

Spear Phishing

Content Injection

Link Manipulation

In session hijacking, phishers exploit web session controls to steal user information, often using sniffers to intercept data for illegal access.

Spear phishing is a targeted email attack that uses personalized details to deceive a specific person or organization into compromising their security.

Content injection involves a phisher altering part of a trusted website's content to redirect users to a fraudulent page, prompting them to enter personal information.

Link manipulation is when a phisher sends a deceptive link, redirecting users to their own malicious website, often revealed by hovering over the link.