Every quarter, the IT security group Knowbe4 examines simulated phishing emails worldwide. They have now analyzed which of the simulated fraud attempts most were tricked by in the fourth quarter of 2021. In Europe, most were tricked into clicking on emails that pretended to be a Teams invitation, according to the group.
– As a result of corona closures and widespread use of home offices, Teams, Zoom and other digital meeting tools have become part of the everyday work of many in both Norway and other European countries. We have become accustomed to emails with Teams invitations, and when we get used to something, we also become less critical. That is what criminals are now exploiting, says security expert Jelle Wieringa in KnowBe4 in a press release.
In addition to emails that looked like a Teams invitation, many in Europe were tricked by emails that appeared to be an invoice, emails with the message that passwords had to be verified, and emails that looked like to come from an employee portal with notification of missing time card. Many also click on e-mails with attachments, with a message in the subject field that the attachment must be considered by you, according to the company.
– Harder to detect
According to Wieringa, attempted fraud via e-mail is becoming increasingly professional and more difficult to detect. He encourages you to evaluate the sender before clicking on an invitation or other links.