According to a new report by Agari on email fraud, one out of every five advanced email attacks is an account takeover-based (ATO) attack. In these attacks, threat actors take control of a legitimate account, which they can then use to carry out other cybercrimes. ATO’s are hard to detect since they involve accounts that are known to and trusted by security solutions and users alike.
The research also found that on average, 23,053 phishing incidents are reported by employees per business per year. Even though half of these reports are false alarms, it costs $4.3 million a year to investigate all those incidents.
Read more: Employees report 23,000 phishing incidents annually, costing $4.3 million to investigate
