Hackers don’t break in. They log in.

90% of all internet breaches are due to stolen login credentials.
Are you and your organization secure against phishing attacks?

Cyber crime is surging like never before…

300%

Rise in cyber crime since the pandemic began

53%

Of companies in Europe & the Middle East have been victims of cyber attacks

9 out of 10

Cyber attacks begin with a phishing email

Most cyber attacks begin as phishing

Phishing is the fraudulent practice of inducing people to reveal sensitive personal information such as credit card numbers and login credentials passwords.

User receives message containing “real” information

Target receives email seemingly from a real person or reputable business

Target tricked into sharing login details on fake website

The design and URL of the fake website will seem identical to genuine site

Cybercriminals are now able to enter the real website

Hackers can now commit fraud or blackmail the user into paying a ransom

The consequences of a phishing attack are devastating

Once hackers have successfully logged in, there are many ways they can damage your organization. Company secrets and private data can be leaked, or even sold online. Hackers can use this data, or the threat of paralyzing crucial business systems, to demand costly ransoms. They may even stay undetected for months or years, slowly gathering sensitive information. Suffering a hack can severely impact an organization’s bottom line. In 2022, the cost of an average data breach rose to a record-breaking $4.35 million (IBM). Yubico’s State of Global Enterprise Authentication survey found that of companies who were victims of a cyber attack…

35%

Experienced reputational damage

35%

Suffered loss of income

17%

Saw increased employee turnover

Companies are more vulnerable than you realize

The report also found that 59% of employees still use username and password as a primary means of authenticating their accounts. Worldwide, 3 billion phishing emails are sent every single day (Forbes). As phishing emails become more professional and harder to detect, it becomes a matter of time till employees are fooled.

It’s no surprise that over 90% of breaches are caused by human error (World Economic Forum). An employee likely won’t realise they’ve made a mistake.

On average, it takes 212 days for an attack to be detected (IBM) and in many cases an organization never even realizes they were the victim of a phishing attack.

Stopping phishing attacks requires MFA. But not all MFA is created equal.

The good news is, phishing can be stopped. All it takes is Multi-Factor Authentication (MFA). The most common forms of MFA use mobile authentication, such as One-Time-Password apps or SMS codes. However, research by Google, NYU, and UCSD based on 350,000 real-world hijacking attempts proved that these are not very effective in preventing account takeovers and targeted attacks. The problem is that mobile authentication itself is vulnerable to phishing attacks.

True protection requires phishing-resistant MFA

Hardware security keys deliver true protection for phishing-resistant MFA. The YubiKey is proven to stop over 99% of account takeovers.

For more Information and ordering:

Contact Multipoint Expert