One of the most common types of cyber-attack experienced by businesses is Phishing; the process by which cybercriminals attempt to gather your private information using fraudulent emails and websites. Phishing emails\/websites are a clever concept, as they lure unknowing users into sharing their credentials and personal data without the cyber-criminal ever having direct access to your system.<\/p>\n
What do I look out for? How do I stop it? I hear you say.<\/p>\n
Phishing attacks are often successful because they mask themselves as a website, or more commonly, an email from a legitimate trusted source. Such a source might be a bank, a government body, or in some cases, pretend to be an email from a senior individual within your own organization.<\/p>\n
If you receive an email and it feels out of place \u2013 wrong time, wrong nature of request or the look, or the style and content of the email feel different, DO NOT OPEN IT. Stop and think before you act.<\/p>\n
<\/p>\n
Ransomware<\/strong><\/p>\n Ransomware is a type of malware that does not allow you access to your systems or data. The hackers only allow access once a fee is paid (a ransom).<\/p>\n Cyber criminals that use Ransomware as their choice of weapon cleverly invoke a feeling of urgency in their emails, often presenting a time limit alongside a link from the fake trusted source, \u2018Your account has been accessed from an unauthorised device, click here in the next 5 minutes to verify your identity and avoid cancellation of your account\u2019. The worry of the potential ramifications if you don\u2019t click \u2013 and the inclusion of the perceived trusted email address\/ logos – can be enough for some to make a split-second decision to click. Then the ransomware attack is complete.<\/p>\n Be wary of email attachments and suspicious links. Just like Phishing attacks, Ransomware criminals also use email as a way to infect devices. As with Phishing attacks, persuasive and often emotive language will be used to encourage you to click on links to infected sites and open attachments containing harmful ransomware viruses. As we said before DO NOT OPEN THE ATTACHMENT.<\/p>\n <\/p>\n Vishing<\/strong><\/p>\n Vishing breaches are almost the same as their similar-sounding counterpart – Phishing breaches. Both use deception as their vehicle to extract sensitive information from the user, but there is one key difference – Vishing is performed using VoIP phone systems as opposed to malicious emails and links like Phishing breaches.<\/p>\n Vishing fraudsters have utilised the increased anonymity that VoIP provides in comparison to traditional telephony. With VoIP there are ways of making it difficult for the police to track down – and therefore punish \u2013 the perpetrators.<\/p>\n When it comes to Vishing attacks it is essential not to give in to pressure and be wary if the caller is using overly emotive language to create a sense of urgency or emergency. You should also completely ignore unknown numbers – if the caller is legitimate, they will probably leave a message.<\/p>\n These are just some of the cyber threats that exist with the intentions of stopping production and exploiting your business financially. One thing that all of these types of attack have in common is that they can all be avoided by taking time to educate your employees. Where do I start? How do I know I\u2019m using the right sources? What if I teach them something wrong? All understandable concerns.<\/p>\n That is where we at Grapevine come in. Our Cyber Security Training Platform can prepare your employees for whatever the digital universe has to throw at them. Let\u2019s take a closer look at our training platform.<\/p>\n <\/p>\n At Grapevine, we don\u2019t believe that traditional security awareness training is still fit for purpose as, in the modern workplace, your employees are frequently faced with sophisticated Phishing and Ransomware attacks, and most simply don\u2019t know enough about them to combat them effectively.<\/p>\n We believe in progression based on three steps; analyse, train, Phish.<\/p>\n Baseline Testing \u2192 Train your users \u2192 Phish your users \u2192 See the results.<\/strong><\/p>\n We provide baseline testing to assess the Phish-Prone™ percentage of your users through a free simulated phishing attack. We then use the world’s largest library of security awareness training content, including interactive modules, videos, games, posters, and newsletters. Once having trained your users, we then test-Phish them using fully automated simulated phishing attacks with thousands of templates, unlimited usage, and community phishing templates. You can then see the results through enterprise strength reporting, showing stats and graphs for both training and phishing.<\/p>\n Does it work though?<\/p>\n Yes, it does! Our research uncovered some alarming results – the overall original industry initial Phish-prone percentage benchmark turned out to be an astonishing 37.9%! Thankfully for business owners, after adopting new-school security awareness training, that can be slashed by over half to 14.1%. After one year of following these best practices, the final Phish-prone percentage can almost be eradicated completely to an average of 4.7%!<\/p>\n <\/p>\n Unlimited Use<\/strong><\/p>\n Our platform offers three Training Access Levels, giving you access to our content library of 1,000+ items based on your subscription level. We also offer unlimited access to all phishing features with flexible licensing. There are no artificial license ceilings, no 10% average allowance, and powerful new features are added regularly.<\/p>\n <\/p>\n Engaging, Interactive Browser-based Training<\/strong><\/p>\n Do you find boring training difficult to concentrate on? Our modern interactive training programme gives your users a fresh new learner experience that makes learning fun and engaging, as opposed to older outdated methods that make learning a monotonous task. There is a feature that allows users to compete against their colleagues, see where their skills rank on a leader board, and earn badges; all acting as an incentive to learn more and keep your organisation safe.<\/p>\n <\/p>\n Brandable Content<\/strong><\/p>\n Can I make the whole training experience feel more appropriate to my company? There is a feature that allows you to personalise your training experience at the beginning or end of training modules, and you can also add your ‘branding\u2019 (logos, custom graphics, corporate colours, etc) to tailor any messages you want to deliver to your users.<\/p>\n <\/p>\n Upload Your Own Content<\/strong><\/p>\n If your existing training is SCORM-compliant, you can upload training \/ video content and manage it alongside our new Cyber Security Training Platform, allowing you to have all your training in one place, at no extra cost!<\/p>\n <\/p>\n Assessments<\/strong><\/p>\n Do you know where your users are in both security knowledge and security culture? This would help establish baseline security metrics. Use the skills-based assessment and the security culture survey to measure and monitor your users\u2019 security knowledge and make a transition to a security-aware culture over time.<\/p>\n <\/p>\n Custom Phishing Templates and Landing Pages<\/strong><\/p>\n The training programme allows you to customise scenarios based on personal information and include simulated attachments (fake attachments) to create your own targeted phishing campaigns. Each Phishing Email Template can have its own Custom Landing Page, which allows for point-of-failure education.<\/p>\n <\/p>\n Phish Alert Button<\/strong><\/p>\n Our Phish alert add-in button gives your team a safe way to forward email threats to the security team for analysis, whilst deleting the email from the user\u2019s inbox to prevent future exposure. And all this with just one simple click!<\/p>\n <\/p>\n Social Engineering Indicators<\/strong><\/p>\n Patented technology turns every simulated phishing email into a tool that IT can use to dynamically train employees by instantly revealing the hidden red flags they missed within that email.<\/p>\n <\/p>\n User Management<\/strong><\/p>\n Our Active Directory Integration allows you to easily upload your users\u2019 data and saves you time by eliminating the need to manually manage the changes. You can also use the Smart Groups feature to tailor and automate your Phishing campaigns, training assignments, and remedial learning, based on your employees\u2019 attributes and behaviour.<\/p>\n <\/p>\n Security Roles<\/strong><\/p>\n Do you employ different levels of password or other security? Our platform allows you to define the level access and administrative ability you would like specific user groups to have, all in unlimited amounts of combinations. With delegated permissions you have the ability to limit roles to only display specific data or allow for the phishing, training, and user management of specific groups.<\/p>\n <\/p>\n Advanced Reporting Feature<\/strong><\/p>\n Our platform has 60+ built-in reports providing intimately interconnected views and detailed reporting on your key awareness training indicators over time. It also has Leverage Reporting APIs to pull data from your console and for multiple accounts, with Roll-up Reporting making it easy to view the results altogether.<\/p>\n <\/p>\nGrapevine\u2019s Cyber Security Training Platform<\/h3>\n
Grapevine\u2019s new Cyber Security Training Platform \u2013 Training features<\/h3>\n
![\"\"](\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/03\/Cyber-BAnner-CTA-2.jpg\")
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"