Security News > 2023 > May > Spearphishing report: 50% of companies were impacted in 2022

Spearphishing is a sliver of all email exploits, but the extent to which it succeeds is revealed in a new study from cybersecurity firm Barracuda Network, which analyzed 50 billion emails across 3.5 million mailboxes in 2022, unearthing around 30 million spearphishing emails.

The survey queried companies about damages they experienced as a result of email attacks.

Companies favoring remote work also reported that it took longer to detect and respond to email security incidents - 55 hours to detect and 63 hours to respond and mitigate, compared to an average of 36 hours and 51 hours, respectively, for organizations with fewer remote workers.

The average organization received approximately five emails per day that were identified as spearphishing exploits, and these attacks garnered an average 11% clickthrough rate, according to the report.

Companies slow to identify and respond to email attacks.

Fleming Shi, the chief technology officer of Barracuda, said email is still very much the main attack vector used against enterprises, even small to medium-sized businesses, with threat actors who go after large companies often seeking prizes above and beyond what can be filched from a single hit.

News URL

https://www.techrepublic.com/article/barracuda-networks-spearphishing-study/