Accordingly, by pretending to be a person or organization that users trust, fake links will convince users to perform actions that allow fraudsters to access devices, accounts and personal information. their cause. They can easily infect victims with malware or steal sensitive information.
Social engineering attacks often take advantage of users' trust to gain valuable information. Here, valuable information can be anything from social network login information to an entire identity through a citizen identification number. This scam urges users to open attachments, click links, and fill out forms or respond by providing personal information.
Financial phishing is a form of asset fraud involving banks, digital stores and payment systems. One of the forms of payment system phishing is impersonating famous payment brands.
In 2023, Kaspersky solutions detected and prevented a total of 455.708 financial fraud attacks, targeting companies of various sizes in the region. Statistics reveal the number of times users click on phishing links, placed in different communication channels including email, phishing websites, messaging applications or social networks...
Mr. Yeo Siang Tiong, General Superintendent Director of Kaspersky Southeast Asia, commented: "Phishing attack is a form of attack with a high probability of success for cybercriminals when infiltrating business networks. Accordingly, the rise of artificial intelligence (AI) has helped cybercriminals create fraudulent messages or property fraud. This leads to difficulty for users in distinguishing between phishing and normal communication. This is why the role of security solutions is becoming increasingly important."
According to the report, the Philippines recorded 163.279 cases of financial fraud - the highest in 2023. Followed by Malaysia with 124.105 cases, Indonesia also recorded 97.465 attacks, while the number of attacks in Vietnam was 36.130. Thailand and Singapore are the two countries with the lowest number of attacks, 25.227 and 9.502 respectively.
To help businesses protect their networks against damage from a sophisticated phishing attack, Kaspersky experts recommend the following steps:
- To raise leaders' awareness of the importance of cybersecurity and how to properly allocate budget to stay ahead of cyber threats, businesses should invest in Kaspersky Interactive Protection Simulation solution to improve expertise. their subject to C level.
- Consider the advice of experts. For example, the Kaspersky Professional Services solution identifies security vulnerabilities in users' system configurations, and Security Architecture Design helps create the right IT security infrastructure for each company. Every step taken is based on real security needs, giving leaders compelling arguments for budget allocations.
- Install and use enterprise security solutions with anti-phishing software: Advanced Anomaly Control feature in Kaspersky Endpoint Security for Business Advanced, Kaspersky Total Security for Business and Kaspersky Endpoint detect and Response Optimum solutions, helps Prevent and detect "outside the norm" activities performed by users and attackers who have taken control of the system.