More than a third of the cyber attacks experienced by Corvus policyholders to date began with a phishing email. We have observed phishing emails as an attack vector for ransomware, theft of credentials, malware (such as keyloggers), remote access trojans, stealing of sensitive information, fraudulent funds transfers and more.
The FBI Internet Crime Complaint Center (IC3) received over 23,000 business email compromise complaints in 2019 with total adjusted losses of $1.7 billion. With the increase in remote work over the past year, businesses have become even more reliant on email to continue operations, and threat actors have seized on the opportunity. Below are key email security controls and resources to help you explore them further.
- Employee Security Awareness Training
- Multi-factor Authentication
- Disable Legacy Email Protocols (IMAP, POP)
- Out-of-Band Authentication for funds transfers
- Secure Email Gateway (SEG)
- Adopt Email Authentication - SPF, DKIM and DMARC
- Understand and enable email audit logging
- Embed tagline identifying email sent from outside