2. Targeted Spear Phishing Attacks Are Effective
Phishing is similarly prevalent for both small and large organizations, according to Verizon. Targeted attacks typically begin with a spear phishing email message to a group of employees. It only takes one click to infect a victim's machine, and so far cybercriminals have found phishing messages the most effective way to gain initial access into the corporate network. Ten or more spear phishing messages to an organization almost guarantees that an attacker will get at least one employee to click on a malicious link or open an attachment, according to data collected by ThreatSim, an antiphishing firm.