{"id":2974,"date":"2020-04-02T12:09:56","date_gmt":"2020-04-02T16:09:56","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2974"},"modified":"2020-04-07T16:53:14","modified_gmt":"2020-04-07T20:53:14","slug":"a-conversation-with-travis-knapp-prasek-on-phishing-attacks","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/a-conversation-with-travis-knapp-prasek-on-phishing-attacks\/","title":{"rendered":"A Conversation with Travis Knapp-Prasek of NCC Group on Phishing Attacks"},"content":{"rendered":"

\"A<\/p>\n

While phishing attacks are a serious cybersecurity concern, they can be hard to conceptualize. Often, enterprises believe phishing attacks happen to other companies. However, they can absolutely happen to your business, and the results can devastate your business without the right cybersecurity<\/a>.\u00a0\u00a0<\/span><\/p>\n

To learn more, we spoke with Travis Knapp-Prasek, associate security consultant at the <\/span>NCC Group<\/span><\/a>. The NCC Group is a global expert in cybersecurity and risk mitigation working to help businesses identify, assess, mitigate, and respond to risks.\u00a0<\/span><\/p>\n

Here\u2019s our conversation:\u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

A Conversation with Travis Knapp-Prasek on Phishing Attacks<\/b><\/h2>\n

Solutions Review: How common are phishing attacks?<\/b><\/h3>\n

Travis Knapp-Prasek: Quite common. The barrier of entry to create a phishing attack is low. Anyone can find an email address and reach out to it with a message of their choosing.<\/span><\/p>\n

SR: Approximately how often would you say enterprises and employees face them?<\/b><\/h3>\n

TKP: Since most email systems run 24\/7, the door is always open for a phishing email to be sent and received. My personal email address is endlessly receiving phishy emails that luckily usually end up in the spam folder.<\/span><\/p>\n

SR: And what are the potential consequences of a successful phishing attack?<\/b><\/h3>\n

TKP: The consequences depend on what the attacker is trying to gain access to. Credential harvesting is a common goal, which can include the usernames and passwords to an employee\u2019s email account, VPN connection, or company web portal.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

SR: What are some of the blatant signs of a phishing attack email that employees should recognize immediately?<\/b><\/h3>\n

TKP: Anything that seems out of the ordinary that hasn\u2019t been discussed by your employer beforehand should raise an eyebrow. With the rise of remote work, this can be a little more difficult due to the reliance upon email versus face to face communication. An unexpected gift or awards program, for instance, should raise a red flag, as should any email that includes a link to a site you don\u2019t recognize that\u2019s asking for your username and password. Checking the URL in the address bar can display misspellings of the company name.<\/span><\/p>\n

SR: Your research has determined the clever use of fonts can conceal phishing attacks. Could you describe your findings in more detail?<\/b><\/h3>\n

TKP: A malicious actor needs to host their campaign somewhere on a website. One method to deceive the eyes is by using letters in the domain names that look like other letters. Lowercase L and uppercase i render exactly the same in most computer platforms due to the use of sans-serif fonts. If a company has the letter L in their name and hasn\u2019t registered the misspelled domain name with i replacing the L , that\u2019s an opportunity for an attacker to own and use a domain name that would deceive people.<\/span><\/p>\n

SR: Based on your research, what can employees and companies do to recognize more devious phishing attacks?\u00a0<\/b><\/h3>\n

Travis Knapp-Prasek:<\/span><\/p>\n