Learn about phishing threats, security awareness best practices, and how to build a stronger security culture in your organization.
12 articles found
Between 2013 and 2015, a single fraudster spoofed Taiwanese hardware giant Quanta Computer to extract $122 million from Google and Facebook. Here is how it happened.
In September 2023, cybercrime group Scattered Spider bypassed MGM Resorts' multi-factor authentication with a simple phone call to the helpdesk. Total damages: over $100 million.
In 2015, wireless hardware giant Ubiquiti Networks transferred $46.7 million into foreign accounts after finance received emails impersonating their CEO and Chief Legal Officer.
In early 2024, a finance worker in Hong Kong joined a video call with their UK-based CFO and colleagues. Everyone on screen was an AI deepfake. Cost: HK$200 million ($25.6M USD).
In 2016, Boeing and Airbus supplier FACC AG transferred €50 million ($54M USD) after an accounting worker received emails posing as the CEO. The CEO and CFO were subsequently fired.
The historic 2013 Target breach exposed 110 million customer credit cards and personal records. It all started when an employee at an HVAC contractor clicked a malicious phishing email.
In 2020, Shark Tank investor Barbara Corcoran was tricked out of $388,700 when her bookkeeper received a fake renovation invoice from a domain that differed by just one letter.
In 2022, the 'Oktapus' SMS phishing campaign compromised Twilio, DoorDash, and over 130 organizations by sending fake IT schedule notifications that intercepted MFA codes.
In August 2019, Toyota Boshoku Corporation lost $37 million when attackers infiltrated vendor email threads and submitted fraudulent electronic payment redirection requests.
In December 2015, hackers cut power to 230,000 Ukrainian residents in freezing winter temperatures. The entry point? A spear-phishing email with a malicious macro attachment.
In 2014, attackers wiped 100 terabytes of data, leaked unreleased films, and crippled Sony Pictures. The breach originated from spear-phishing emails targeting system administrators.
Explore the latest 2024-2025 phishing statistics: 3.4 billion malicious emails daily, 82% human involvement in breaches, and how regular simulation reduces click rates from 34% to 4%.
