Editorial & Advertiser Disclosure Global Banking And Finance Review is an independent publisher which offers News, information, Analysis, Opinion, Press Releases, Reviews, Research reports covering various economies, industries, products, services and companies. The content available on globalbankingandfinance.com is sourced by a mixture of different methods which is not limited to content produced and supplied by various staff writers, journalists, freelancers, individuals, organizations, companies, PR agencies Sponsored Posts etc. The information available on this website is purely for educational and informational purposes only. We cannot guarantee the accuracy or applicability of any of the information provided at globalbankingandfinance.com with respect to your individual or personal circumstances. Please seek professional advice from a qualified professional before making any financial decisions. Globalbankingandfinance.com also links to various third party websites and we cannot guarantee the accuracy or applicability of the information provided by third party websites. Links from various articles on our site to third party websites are a mixture of non-sponsored links and sponsored links. Only a very small fraction of the links which point to external websites are affiliate links. Some of the links which you may click on our website may link to various products and services from our partners who may compensate us if you buy a service or product or fill a form or install an app. This will not incur additional cost to you. A very few articles on our website are sponsored posts or paid advertorials. These are marked as sponsored posts at the bottom of each post. For avoidance of any doubts and to make it easier for you to differentiate sponsored or non-sponsored articles or links, you may consider all articles on our site or all links to external websites as sponsored . Please note that some of the services or products which we talk about carry a high level of risk and may not be suitable for everyone. These may be complex services or products and we request the readers to consider this purely from an educational standpoint. The information provided on this website is general in nature. Global Banking & Finance Review expressly disclaims any liability without any limitation which may arise directly or indirectly from the use of such information.

KNOWBE4 RELEASES QUARTERLY TOP-CLICKED PHISHING REPORT FOR Q2 2017

Results Show Human Error Continues to Be an Organisation’s Weakest Link

KnowBe4, the provider of the world’s most popular security awareness training and simulated phishing platform,today shared its Top 10 Global Phishing Email Subject Lines for Q2 2017. While the results show that users click most frequently on business-related subject lines (“Security Alert” is the highest ranked at 21 per cent), they still click with alarming frequency on subject lines not related to work topics and showing red flags.

According to Osterman Research, email has been the number one network infection vector since 2014. It’s an effective method because it gives attackers more control than merely placing traps on the web and hoping that people will stumble over them. Instead, attackers craft and distribute enticing material to both random and targeted means. This method gives the cybercriminals greater control in selecting potential victims, leveraging multiple psychological triggers and engaging in what amounts to a continuous maturity cycle.

The Top 10 Global Most-Clicked Global Phishing Email Subject Lines for Q2 2017 include:

  1. Security Alert – 21%
  2. Revised Vacation & Sick Time Policy – 14%
  3. UPS Label Delivery 1ZBE312TNY00015011 – 10%
  4. BREAKING: United Airlines Passenger Dies from Brain Haemorrhage – VIDEO – 10%
  5. A Delivery Attempt was made – 10%
  6. All Employees: Update your Healthcare Info – 9%
  7. Change of Password Required Immediately – 8%
  8. Password Check Required Immediately – 7%
  9. Unusual sign-in activity – 6%
  10. Urgent Action Required – 6%

*Capitalisation is as it was in the phishing test subject line

“The subject lines we are reporting here actually made it through all the corporate filters and into the inbox of an employee. That’s astounding. We are in a security arms race, and a multi-layered defence is critical because each layer has different points of effectiveness and ineffectiveness,” said  Perry Carpenter, Chief Evangelist and Strategy Officer at KnowBe4. “If crafted correctly, the right type of message can sail through all of the defences because it is finding the least effective point of each and playing into the human psyche of wanting to receive something you didn’t know about or needing to intervene before something is taken away. Ultimately this means that a company’s ‘human firewall’ is an essential element of organisational security because people truly are the last line of defence.”

Businesses have to also be aware that social media messages to their users are potential landmines to their corporate networks. KnowBe4 evaluated the Top 10 Global Social Networking Subject Lines and found that four of the top 10 spots equaling a full 44 per cent were related to LinkedIn messages, which users often have tied to their work email addresses.

As part of its ongoing research efforts, In October 2016 KnowBe4 evaluated more than 10,000 email servers and found that 82 per cent of them were misconfigured, allowing spoofed emails to successfully bypass endpoint security systems and enter an organisation’s network. Aggregating information on the most clicked phishing test subject lines and sharing that data with clients is another way that KnowBe4 is helping protect against social engineering tactics that continue to plague businesses around the globe, resulting in growing ransomware, CEO fraud and other phishing-initiated attacks.

Businesses that are not already working with KnowBe4 to effectively train their workforce into a “human firewall” can utilise a number of free tools at www.knowbe4.com to test their users and their network.