Spoofing Facts You Need to See
These Spoofing Facts Can Help You Avoid a Brand Impersonation Nightmare
Spoofing or brand impersonation is a popular tactic that cybercriminals use to perpetrate phishing attacks. By making messages seem routine or faking that a message came from a well-known and trustworthy brand, the recipient is less likely to suspect that a message is malicious. Spoofing is a serious danger to business security that employees face daily and is commonly used in business email compromise schemes — the most expensive cyberattack a business can experience. It’s also frequently used as a tool in social media fraud, credential compromise, account takeover and other dangerous cyberattacks.
10 Spoofing Facts to Know
- 25% of all branded emails that companies receive are spoofed or brand impersonation attempts.
- Brand impersonation has risen by more than 360% since 2020.
- 97% of employees cannot recognize sophisticated phishing threats.
- 98% of cyberattacks contain one or more elements of social engineering like spoofing.
- 98% of organizations received a threat from a supplier domain in 2021.
- One-quarter of all email phishing attacks in Q4 2021 spoofed UPS or DHL.
- Brand fraud in 2021 was 15 times higher than in 2020.
- 1 in 3 employees is likely to click the links in phishing emails.
- 45% of employees click emails they consider to be suspicious “just in case they are important.”
- 1 in 8 employees is likely to share information requested in a phishing email.
Spoofing Facts Spotlight: Microsoft
Microsoft is one of the most spoofed brands that employees encounter. Why? Employees handle a lot of Office files, including via email. These Microsoft spoofing facts offer a snapshot of the scope of the danger presented by this type of brand impersonation.
- Approximately 145 million people use Teams/Office 365 every day.
- Just under 50% of malicious email attachments arrive in Microsoft Office formats.
- Microsoft Office formats like Word, PowerPoint and Excel are popular file extensions for cybercriminals to use when transmitting malware via email, accounting for 38% of phishing attacks.
- The next most popular delivery method are archived files, such as .zip and .jar, which account for about 37% of malicious files.
Spoofing Facts About Suspicious Subject Lines
Caution when handling branded email can help reduce the chance of interacting with a phishing message. Subject lines that feature oddities like “Warning,” “Your funds has…” or “Message is for a trusted…” should set off alarm bells, especially if the subject line demands urgent action. There are a few red flags that are tip-offs that a branded email may be spoofed or faked instead of a genuine message from that brand.
Common subject lines of spoofing messages aimed at businesses
- Reset Password Required
- Update Payment Information
- Failed Delivery Attempt
- Immediate Action Required
- Account Security Alert
- Final Notice
- Overdue Invoice
- Pending Invoice
- Tracking Link Enclosed
- Pending Customs Fees
Other Red Flags That Could Indicate Spoofing
Spoofing is generally a facet of phishing. These red flags in suspicious messages often point to spoofing.
An improper or unprofessional greeting
If the greeting seems strange, be suspicious. Is the greeting in a different style than you usually see from this sender? Is it generic when it is otherwise usually personalized, or vice versa? Anomalies in the greeting in a message are clues that it may not be legitimate.
A message sent from an unofficial or unusual domain
Check the sender’s domain by looking at the email address of the sender. A message from a major corporation is going to come from that company’s usual, official domain. For example, if a message carrying a security warning says it is from “Sender@microsoftsecurity.com instead of “Sender@microsoft.com,” it’s likely phishing.
Odd word choices and grammar
This is a hallmark test for a phishing message. Check for grammatical errors, usage mistakes, data that doesn’t make sense, variances in the company name or address, strange word choices and problems with capitalization or punctuation. An error-filled message is probably phishing.
Security and compliance awareness training is a powerful weapon against cyberattacks of all kinds, including spoofing. Security awareness training empowers employees to resist phishing lures to spot and stop cyberattacks before they start. Contact us today or book a discovery session!