Survey highlights rise of sophisticated phishing attacks that manage to trick even trained IT professionals.<\/b>
\nThe global shift to remote working has further aggravated the onslaught, sophistication, and impact of phishing attacks, a new survey has suggested. Security vendor Ivanti quizzed over a thousand enterprise IT professionals across the US, UK, France, Germany, Australia and Japan, finding nearly three-quarters (74%) of organizations claimed to have fallen victim to a phishing attack in the last year. As many as 40% confirming they were victimized in the last month alone. Ivanti builds on a recent research by Aberdeen, which discovered that attackers have a higher success rate on mobile endpoints than on servers. \u201cReducing the risk of phishing attacks is a race against time, in more than one dimension. Enterprise IT pros must stay ahead not only of the attackers who are constantly crafting new attacks, but also of their own users \u2014 who are shockingly quick to click on malicious links,\u201d said Derek E. Brink, vice president and research fellow at Aberdeen Strategy & Research. With threat actors constantly on the lookout for exploiting enterprise security gaps, combining the results of the survey Ivanti and Aberdeen\u2019s, Ivanti believes that fatigued IT teams and ill-prepared employees are making businesses lose the war on phishing. It builds its case by relying on the fact that 73% of respondents said that their IT staff had been targeted by phishing attempts, and 47% of those attempts were successful. \u201cAnyone, regardless of experience or cybersecurity savvy, is susceptible to a phishing attack. After all, the survey found that nearly half of IT professionals have been duped,\u201d said Chris Goettl, senior director of product management at Ivanti. Ivanti is using the survey to suggest businesses to implement a zero-trust security strategy to combat phishing attacks. \u201cOrganizations should also consider getting rid of passwords by leveraging mobile device authentication with biometric-based access to eliminate the primary point of compromise in phishing attacks,\u201d suggests Goettl.<\/p>\n