A recent study by Experian and the Ponemon Institute found a troubling reality: A large amount of enterprise cybersecurity training aimed at combating employee negligence, espionage and susceptibility to cyberattacks is largely ineffective. But this should come as no surprise to many employees and legal professionals who are seeing firsthand that despite efforts otherwise, employee-targeted attacks have hit record-setting highs.
The Anti-Phishing Working Group (APWG) reported that phishing attacks in the first three months of 2016 reached the highest levels ever observed. The number of unique phishing email campaigns the group tracked rose from just under 100,000 in January to over 229,000 for both February and March. Likewise, the number of phishing websites rose from just over 48,000 in October 2015 to over 123,000 by March 2016, while the cumulative number of unique phishing websites stood at almost 290,000 from January 2016 to the end of March.
