Phishing, data stealing, and impersonation attacks targeting your brands, executives, and external digital assets are nothing new in the cybersecurity space. The term “phishing” can be traced back to the mid-90s, when threat actors would impersonate AOL admins to deceive and defraud users of their login credentials.
These days, not much has seemingly changed. Threat actors still target unsuspecting users via phony accounts and malicious links. However, the scale and maturity of modern attack campaigns have evolved light years beyond the days of dial-up internet. Today’s adversaries employ highly sophisticated tactics and leverage complex attack infrastructure to maximize the reach of their campaigns and potentially impact hundreds of thousands of victims. For example, a typical phishing or spear-phishing campaign may utilize multiple fake accounts, dozens of impersonating domains and subdomains, massive volumes of fraudulent emails and SMS messages, link shorteners, botnets, etc. ...read more!
