With the increase of email phishing attacks being the primary attack vector, ransomware payments have risen to 60%, it's important to take a closer look at email-based ransomware attacks. In the past couple of years, cybercriminals have steered clear of using email to implement ransomware and would instead encrypt entire networks. Now there is a trend in Coronavirus-related phishing email subjects that lure people in using social engineering.
The largest email campaigns recently occurred by a new ransomware group called Avaddon that occurred in June. It was distributed in over one million messages, mainly targeting organizations in the US. One reason for the shift back to email based attacks is because of organizations continuing to work remotely.
A crucial component with defending against these types of attacks is to build your human layer of defense. New-school security awareness training can teach your users how to spot and report any suspicious activity.
Here's how it works:
