Security News > 2020 > April > Coronavirus-themed attacks proving more successful than typical phishing campaigns

Enterprise SaaS-based attacks are becoming more prevalent, according to Menlo, which said that 97% of these attacks use just five popular SaaS services.
With the coronavirus spreading, such phishing attacks are likely to increase, while attackers are expected to continue to evolve their techniques.
Since these types of attacks are able to avoid typical security protection, they are difficult to thwart.
"But the unfortunate reality is that there really is not a good way for organizations to protect themselves against these types of attacks. One of the challenges the industry faces today is that most products and security strategies rely on an attack having been identified previously. The number of successful attacks that we read about in the news demonstrates that criminals are able to innovate and evolve their tactics to bypass the defenses in place."
"To mitigate some of these attacks, they should make sure they do not use the same passwords for multiple accounts and change their passwords more frequently. There is a surge in COVID-19 based attacks and we do not see the growth in attacks flattening. The problem is after COVID-19, criminals will move to another tactic and different techniques."
News URL
Related news
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks (source)
- iOS devices face twice the phishing attacks of Android (source)
- Windows NTLM hash leak flaw exploited in phishing attacks on governments (source)
- Three Reasons Why the Browser is Best for Stopping Phishing Attacks (source)
- Phishing detection is broken: Why most attacks feel like a zero day (source)
- DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack (source)
- Low-tech phishing attacks are gaining ground (source)
- MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks (source)
- Focused Phishing: Attack Targets Victims With Trusted Sites and Live Validation (source)
- CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users (source)