Security News > 2020 > April > Coronavirus-themed attacks proving more successful than typical phishing campaigns

Enterprise SaaS-based attacks are becoming more prevalent, according to Menlo, which said that 97% of these attacks use just five popular SaaS services.
With the coronavirus spreading, such phishing attacks are likely to increase, while attackers are expected to continue to evolve their techniques.
Since these types of attacks are able to avoid typical security protection, they are difficult to thwart.
"But the unfortunate reality is that there really is not a good way for organizations to protect themselves against these types of attacks. One of the challenges the industry faces today is that most products and security strategies rely on an attack having been identified previously. The number of successful attacks that we read about in the news demonstrates that criminals are able to innovate and evolve their tactics to bypass the defenses in place."
"To mitigate some of these attacks, they should make sure they do not use the same passwords for multiple accounts and change their passwords more frequently. There is a surge in COVID-19 based attacks and we do not see the growth in attacks flattening. The problem is after COVID-19, criminals will move to another tactic and different techniques."
News URL
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)