Security News > 2020 > April > Coronavirus-themed attacks proving more successful than typical phishing campaigns

Enterprise SaaS-based attacks are becoming more prevalent, according to Menlo, which said that 97% of these attacks use just five popular SaaS services.
With the coronavirus spreading, such phishing attacks are likely to increase, while attackers are expected to continue to evolve their techniques.
Since these types of attacks are able to avoid typical security protection, they are difficult to thwart.
"But the unfortunate reality is that there really is not a good way for organizations to protect themselves against these types of attacks. One of the challenges the industry faces today is that most products and security strategies rely on an attack having been identified previously. The number of successful attacks that we read about in the news demonstrates that criminals are able to innovate and evolve their tactics to bypass the defenses in place."
"To mitigate some of these attacks, they should make sure they do not use the same passwords for multiple accounts and change their passwords more frequently. There is a surge in COVID-19 based attacks and we do not see the growth in attacks flattening. The problem is after COVID-19, criminals will move to another tactic and different techniques."
News URL
Related news
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)
- FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services (source)
- Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail (source)
- YouTube warns of AI-generated video of its CEO used in phishing attacks (source)
- Ukrainian military targeted in new Signal spear-phishing attacks (source)
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks (source)
- iOS devices face twice the phishing attacks of Android (source)