{"id":4874,"date":"2020-04-08T13:47:23","date_gmt":"2020-04-08T17:47:23","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4874"},"modified":"2021-05-13T11:13:55","modified_gmt":"2021-05-13T15:13:55","slug":"preventing-phishing-attacks-from-an-identity-management-perspective","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/","title":{"rendered":"Preventing Phishing Attacks From an Identity Management Perspective"},"content":{"rendered":"

\"Preventing<\/p>\n

How can your business prevent phishing attacks through identity management?\u00a0<\/strong><\/em><\/p>\n

Rarely do we discuss phishing attacks from an explicit identity management<\/strong><\/span><\/a> perspective. When we do discuss it, it usually arises via a discourse on the potential targets of a phishing attack. For example, most phishing attacks target identity management through direct credential theft.\u00a0<\/span><\/p>\n

Therefore, we most often discuss phishing from a threat intelligence or security monitoring angle. In fact, Solutions Review provides several<\/a><\/strong><\/span> resources<\/strong><\/span><\/a> on phishing<\/a> attacks<\/a><\/strong><\/span> under our SIEM umbrella.\u00a0<\/span><\/p>\n

However, we need to start thinking about phishing from an identity management perspective. After all, identity management represents the prime digital perimeter for businesses of all sizes and the core of cybersecurity<\/a><\/strong><\/span>. Shouldn\u2019t we address the major security challenge from this angle?\u00a0<\/span><\/p>\n

So, let\u2019s take a look.\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Phishing Attacks From an Identity Management Perspective\u00a0<\/b><\/h2>\n

How Do Phishing Attacks Operate?<\/b><\/h3>\n

Phishing attacks refer to a vast array of malicious digital attacks with a unifying theme: they get the victim to act against their best interests. The commonly recognized form of phishing attack operates via email; the hacker sends out a message supposedly from a respected and recognized institution or individual. Sometimes, the message asks for the user to reenter or update their credentials. In other cases, they ask the user to pay an overdue fine, fee, or bill, giving away both money and sometimes financial information.\u00a0<\/span><\/p>\n

Finally, in other cases, they ask the user to simply open an email or attachment, which contains a malicious malware payload.\u00a0<\/span><\/p>\n

Where phishing attacks differ is in their targets and in the layers of impersonation they use to deceive victims. The most targeted and most sophisticated phishing attacks are called \u201cspear-phishing\u201d because of this.\u00a0<\/span><\/p>\n

How Do Phishing Attacks Succeed?\u00a0<\/b><\/h3>\n

Hackers may use spam-like tactics for their phishing attacks; they create a fake bank email asking victims to put in their credentials and see who they get.\u00a0<\/span><\/p>\n

However, many phishing attacks, especially spear-phishing attacks, instead, target a specific individual at a specific business. To make these attacks succeed, hackers use all of the tools and information at their disposal. For example, threat actors might gather information about their disguise and their victim via social media to make their messages feel more natural. Alternatively, they may gather information released to the public, such as press releases; this information could help them create urgent scenarios that fuel successful phishing attacks. After all, phishing attacks rely on users not paying close attention and making quick and rash decisions. If they feel pressure, they are more likely to experience both.\u00a0<\/span><\/p>\n

Above all, spear-phishing attacks require study. Often, hackers work to make sure that everything from the email address to the face in the description matches their disguise.\u00a0<\/span><\/p>\n

Finally, spear-phishing attacks make a seemingly natural request using language the victim recognizes as legitimate. For example, hackers don\u2019t ask for $10,000 in a phishing attack; instead, they ask for something like $12,618.57.\u00a0<\/span><\/p>\n

Therefore, the most basic phishing attacks may include spelling errors, incorrect fonts, discolored logos\u2014issues your employees should catch. However, spear-phishing attacks may look like any other email, making them virtually undetectable.\u00a0\u00a0<\/span><\/p>\n

Prevent Phishing Attacks with Identity Management \u00a0 <\/b>\u00a0<\/span><\/h3>\n

So how can identity management help prevent phishing attacks? First, multifactor authentication (MFA). Multifactor authentication allows enterprises to go beyond regular password-only authentication to include factors like geofencing, biometrics, and time of access monitoring. Hackers can\u2019t simply phish many of these credentials, limiting the effectiveness of their phishing attacks.\u00a0<\/span><\/p>\n

Additionally, identity management can help prevent email spoofing. Threat actors often take advantage of email authentication gaps to impersonate legitimate web domains. Make sure only authenticated users can use your email domain. While sometimes hackers will exploit fonts to impersonate legitimate domains, most hackers don\u2019t need to do so.\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

Finally, phishing attacks can end up mitigated by identity management\u2019s enforcement of the Principle of Least Privilege. If one user can make huge financial moves and decisions, that makes them an ideal target for hackers. If it takes three users\u2019 credentials to make a financial payment of ten thousand or more, that makes your enterprise less of a target.\u00a0<\/span><\/p>\n

How to Learn More<\/b><\/h3>\n

Check out our Identity Management Buyer\u2019s Guide<\/a><\/strong><\/span> for more on the top providers and their key capabilities. Also, check out the Solutions Suggestion Engine<\/a><\/strong><\/span>, our new application which matches enterprises to vendor-created profiles in seconds.\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

How can your business prevent phishing attacks through identity management?\u00a0 Rarely do we discuss phishing attacks from an explicit identity management perspective. When we do discuss it, it usually arises via a discourse on the potential targets of a phishing attack. For example, most phishing attacks target identity management through direct credential theft.\u00a0 Therefore, we […]<\/p>\n","protected":false},"author":41,"featured_media":3375,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,1204,76,425,435,1413],"acf":[],"yoast_head":"\nPreventing Phishing Attacks From an Identity Management Perspective<\/title>\n<meta name=\"description\" content=\"Rarely do we discuss phishing attacks from an explicit identity management perspective. IAM could prove the difference between security and danger.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/\",\"name\":\"Preventing Phishing Attacks From an Identity Management Perspective\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg\",\"datePublished\":\"2020-04-08T17:47:23+00:00\",\"dateModified\":\"2021-05-13T15:13:55+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Rarely do we discuss phishing attacks from an explicit identity management perspective. IAM could prove the difference between security and danger.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg\",\"width\":800,\"height\":425,\"caption\":\"Top-Tier Password Best Practices for World Password Day 2021\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Preventing Phishing Attacks From an Identity Management Perspective\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer's Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Preventing Phishing Attacks From an Identity Management Perspective","description":"Rarely do we discuss phishing attacks from an explicit identity management perspective. IAM could prove the difference between security and danger.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/","url":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/","name":"Preventing Phishing Attacks From an Identity Management Perspective","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg","datePublished":"2020-04-08T17:47:23+00:00","dateModified":"2021-05-13T15:13:55+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Rarely do we discuss phishing attacks from an explicit identity management perspective. IAM could prove the difference between security and danger.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/07\/privileged-access-management-MOD.jpg","width":800,"height":425,"caption":"Top-Tier Password Best Practices for World Password Day 2021"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/preventing-phishing-attacks-from-an-identity-management-perspective\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Preventing Phishing Attacks From an Identity Management Perspective"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer's Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4874"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4874"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4874\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/3375"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4874"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4874"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}