Search Close
Email Security Blog

Q1 TrustIndex Findings: Phishing is undergoing a rapid and dramatic evolution

Agari May 16th, 2014 Email Security
Fallback Featured Image

Is Your Company Prepared?

In Q1 2014, Agari saw a dramatic evolution in phishing, with CryptoLocker “ransomware” and GameOver Zeus data-theft malware driving large attacks. CryptoLocker encrypts the user’s hard drive until a $400 Bitcoin ransom payment is made, and GameOver Zeus is the latest data-theft malware.  These attacks abuse a growing number of domains, with attacks typically spiking from thousands of malicious emails per day, to millions as the criminals attempt to let loose the malware barrage before the security industry can respond.

Unfortunately, too many companies fail to join their peers in taking advantage of the DMARC standard.

We have just released our Q1 TrustIndex, which covers the period from January through March 2014 and identifies the sectors and companies that have the highest and lowest risk for dangerous emails – such as these malware-driven attacks on consumers. You can download the complete Q1 TrustIndex for free here and see how your industry stacks up.

Other Notable highlights from the Agari TrustIndex Report:

  • Health Care continues to be the worst performer across all measures of the study and most susceptible to email attacks and cyber-fraud.  Health care records are five times more vulnerable than credit card data, categorizing all but one health care company as Easy Targets.
  • Financial Services was broken down into Payments, Mega Banks, Large Banks and Retail Banks (Europe) in Q1.
  • Retail Banks:  in Q1 the ThreatScore for the largest retail banks jumped 500%, primarily the result of two months of heavy spamming connected with two banks. This shows that criminals are constantly shifting their targets and the attack landscape is volatile.
  • Social Media has been a consistent winner in security, with sites such as Facebook and Twitter achieving a perfect TrustScore of 100. These two companies were among the seven companies, out of 133 who achieved a perfect TrustScore.
  • Retailers v. Etailers
    • Retailers are still one of the main targets of email attacks, yet the sector’s ThreatScore decreased by nearly 53% from Q4 to Q1, indicating that fraudsters are aiming for higher profile attacks.
    • Etailers remain leaders in email security, with companies such as Netflix, Amazon and Groupon maintaining perfect, or near-perfect, TrustScores. Retailers have a long way to go to catch up to the security practices of Etailers.

Read the full report here

 

Leave a Reply

Your email will not be published. All fields are required.

October 31, 2018 Fareed Bukhari

Business Email Compromise: 54% of Email Attacks Use Display Name Deception

September 26, 2018 Ravi Khatod

BEC: Future-Proofing Your Investment in Email Security

September 24, 2018 Armen Najarian

The CMO's Guide to Email Deliverability

September 20, 2018 AJ Shipley

With Losses from Email Attacks Rising Fast, is it Automate—or Else?

September 13, 2018 Srinivas Malladi

The Chance to Work on Advanced Email Fraud Prevention Tech? Priceless

mobile image