So, this morning I received an invite from Sandra Hamish, a Human Resources professional. Looked fairly real, 208 connections, some of them locally here, but when I scrolled down there were a few red flags, like only one endorsement by someone in the UK. Then just for shits & giggles I did a reverse image search on the picture this person had on their profile, and BINGO: it's a stock image from a commercial website that sells these.
The site that allows you to do these reverse image searches is called TinEye and I can recommend them for a quick check if you think something is suspicious. These LinkedIn phishing and social engineering attempts are getting pretty good. You have to keep your eyes open before you "Accept" a scam profile.
New-school Security Awareness Training is critical to enabling you and your IT staff to connect with users and help them make the right security decisions all of the time. This isn't a one and done deal, continuous training and simulated phishing are both needed to mobilize users as your last line of defense. Request your one-on-one demo of KnowBe4's security awareness training and simulated phishing platform and see how easy it can be!
