Office 365 Admins Targeted in Ongoing Phishing Scam

This is not unexpected.  Cybercriminals are fairly smart and they are motivated to target the resources with the greatest and/or most effective access.  As more and more of the world moves their respective Exchange and Active Directory resources to the cloud, O365 and Azure administrators move up the valued target list.

This article simply points out something we have known for some time.  We must take phishing threats and associated awareness training seriously.  This must become a priority for every organization, large and small.  This issue also places a brighter spotlight on the security associated with service providers and 3rd party administrators.  Make sure your security controls take those resources into consideration as well.

https://threatpost.com/office-365-admins-phishing/150352/

Cybercriminals Double-Down on What Works, Nearly Doubling the Number of Phishing Attacks in 2018

Have you noticed a significant increase in phishing messages over the past year?  Have you noticed that these messages seem to be better crafted, harder to identify, and generally very sneaky?  The stats from the team at KnowBe4 bear out the truth that most of us have been living over the last couple of years.

This significant increase in well crafted phishing messages should be a strong motivator to increase awareness training for our end users.

https://blog.knowbe4.com/cybercriminals-double-down-on-what-works-nearly-doubling-the-number-of-phishing-attacks-in-2018