How to set up a phishing attack with the Social-Engineer Toolkit
See a live demo of a phishing attack using the Social-Engineer Toolkit and learn how cybercriminals are using AI to make them more effective.
Phishing
Extortion: How attackers double down on threats
You’ve just been breached or threatened with a cyberattack. Now comes a new extortion demand. Learn how these extortion attacks work.
How Zoom is being exploited for phishing attacks
Learn how easy it is to create a Zoom phishing email in this episode of Cyber Work Applied with Infosec Principal Security Researcher Keatron Evans.
11 phishing email subject lines your employees need to recognize [Updated 2022]
53% of organizations reported a phishing-related breach. Here are the top phishing email subject lines your employees should be able to recognize.
Consent phishing: How attackers abuse OAuth 2.0 permissions to dupe users
What is consent phishing? How are cyberattackers using a standard protocol, OAuth 2.0, to gain access to user data even if it is robustly protected?
The state of BEC in 2021 (and beyond)
What are the trends in business email compromise (BEC) in the next 12 months likely to be? Will deep fakes or crypto be the next big thing in BEC?
Why employees keep falling for phishing (and the science to help them)
Phishing is an ever-present cybersecurity issue. And people keep falling for it. Here is why and how people keep falling for phishing emails.
Phishing attacks doubled last year, according to Anti-Phishing Working Group
This article will recap findings from the 2020 fourth quarter edition of the APWG Phishing Activity Trends Report.
The Phish Scale: How NIST is quantifying employee phishing risk
The NIST Phish Scale is a useful tool for quantifying phishing risk for your employees.
6 most sophisticated phishing attacks of 2020
2020 saw a number of major phishing attacks — and an increase in the attacks. Here are some of the most sophisticated phishing attacks of the year.