Menu
Work in finance or accounting? Watch out for 'whaling' attacks

Work in finance or accounting? Watch out for 'whaling' attacks

These emails are tricky to detect, security firm Mimecast warns

If you work in finance or accounting and receive an email from your boss asking you to transfer some funds to an external account, you might want to think twice.

That's because so-called "whaling" attacks -- a refined kind of phishing in which hackers use spoofed or similar-sounding domain names to make it look like the emails they send are from your CFO or CEO -- are on the rise, according to security firm Mimecast.

In fact, 55 percent of the 442 IT experts Mimecast surveyed this month said their organizations have seen an increase in the volume of whaling attacks over the last three months, the firm reported on Wednesday.

Those organizations spanned the U.S., U.K., South Africa and Australia.

Domain-spoofing is the most popular strategy, accounting for 70 percent of such attacks, Mimecast said; the majority pretend to be the CEO, but some 35 organizations had seen whaling emails attributed to the CFO.

“Whaling emails can be more difficult to detect because they don’t contain a hyperlink or malicious attachment, and rely solely on social engineering to trick their targets,” said Orlando Scott-Cowley, a cybersecurity strategist with Mimecast.

Often, sites like Facebook, LinkedIn and Twitter give attackers the details they need to execute whaling attacks, Mimecast said.

So what's an accountant to do? Mimecast has a few suggestions.

Educating senior management, key staff and finance teams is one of them; another is conducting tests on your own business through mock whaling attacks to see how vulnerable your staff are.

Inbound email stationery that marks emails originating outside the corporate network can be another useful tool, as can domain name registration alert services, which will alert you when domains are created that closely resemble your company's.

“The barriers to entry for whaling attacks are dangerously low," said Scott-Cowley. "As whaling becomes more successful for cybercriminals, we are likely to see a continued increase in their popularity."


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

The making of an MSSP: a blueprint for growth in NZ

The making of an MSSP: a blueprint for growth in NZ

Partners are actively building out security practices and services to match, yet remain challenged by a lack of guidance in the market. This exclusive Reseller News Roundtable - in association with Sophos - assessed the making of an MSSP, outlining the blueprint for growth and how partners can differentiate in New Zealand.

The making of an MSSP: a blueprint for growth in NZ
Reseller News Platinum Club celebrates leading partners in 2018

Reseller News Platinum Club celebrates leading partners in 2018

The leading players of the New Zealand channel came together to celebrate a year of achievement at the inaugural Reseller News Platinum Club lunch in Auckland. Following the Reseller News Innovation Awards, Platinum Club provides a platform to showcase the top performing partners and start-ups of the past 12 months, with more than ​​50 organisations in the spotlight.​​​

Reseller News Platinum Club celebrates leading partners in 2018
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP has honoured its leading partners in New Zealand during 2018, following 12 months of growth through the local channel. Unveiled during the fourth running of the ceremony in Auckland, the awards recognise and celebrate excellence, growth, consistency and engagement of standout Kiwi partners.

Meet the top performing HP partners in NZ
Show Comments