In a recent development, there has been a rise in phishing email attacks targeting multi-factor authentication (MFA), posing a threat to businesses in the UK.
According to new survey data released during October Cyber Security Month by cyber experts at the NEBRC, over a third of HR workers (77%) have encountered phishing incidents at work, a significantly higher rate compared to the average worker (54%).
A study involving 1,000 British working adults revealed a concerning gap in workplace protection, with more than half (53%) lacking adequate or up-to-date training in MFA and phishing.
Phishing emails, which are deceptive messages sent by hackers posing as legitimate contacts or organizations, aim to deceive recipients into clicking on malicious links, opening dangerous attachments, or disclosing sensitive information like passwords or making fraudulent payments.
Martin Wilson, Police Detective Inspector and Head of Student Services at NEBRC, explained that hackers are now using compromised legitimate email accounts to send phishing emails, making it harder to detect these attacks.
To combat MFA bypass phishing attacks, it is recommended to use more secure MFA methods such as on-screen codes and physical MFA keys. These methods offer better protection against hacking attempts and phishing attacks.
It is crucial for businesses to educate their teams on spotting phishing emails, implement stronger MFA measures, monitor unusual activity, review email rules regularly, and use spam filters to safeguard against MFA bypass attacks.
The NEBRC offers training to help business owners and employees understand the risks of phishing and MFA, while the National Cyber Security Centre (NCSC) provides valuable guidance and resources on these topics.