1、2022 Annual State of Phishing ReportITS ALWAYS A PHISHContentsExecutive Summary .12022 State of Phishing Whats in Your Inbox?.2 Threat Actors,See You in the Cloud!.3 Secure Email Gateways Dont Stop Advanced Phishing Attacks .4Hand Over Your Credentials!.5 Credential Theft What Can We Do About It?.6B
2、usiness Email Compromise:Did You Get Trapped in That Conversation?.7 Business Email Compromise:Direct Deposit Scam .7 Business Email Compromise:Gift Card Fraud .8 Business Email Compromise:Invoice Scam .9The Year of Ransomware .10 Get Upstream:Tackle the Phishing Problem Early Before Ransomware Take
3、s Its Toll .10 Breaking Down a Ransomware Attack .11Phishing Prevention Starts With Human Conditioning .12 Model Simulation Scenarios After Threats That Matter .12 Timing Is Everything When Conducting Simulation Training .13 Oops!I Did It Again:Addressing Repeat Clickers .14 Phishing Simulation Trai
4、ning No Manual Required .15 Measuring Up to Your Peers:Industry Results .16Catching Up With Cofense .17Its Always a PHISHExecutive SummaryIf there is anything I hope the industry takes away from the Cofense 2022 State of Phishing Report,it is that threat actors are innovating but Secure Email Gatewa
5、y vendors(SEGs)are not.I believe the number of real phish,reported by real users,found in all major SEG environments speaks for itself.builds,curates,and maintains real phishing samples that have been reported by humans.For the first time ever,we have brought a solution to market that lets you use C
6、ofense data to test your vendors.Are you spending your budget on multiple layers of email defense?Do you have to?Also,the phishing simulation awareness mission is finished.Employees know what phishing is.Phishing simulations create a prepared workforce.Prepared to do what?Recognize and Report suspic