No one is immune to phishing attack

Phishing is real and no one is immune to phishing. One in 61 emails in your inbox now contains a malicious link Phishing. Phishing can only be managed by making users (employees) more aware of the different tricks used in phishing. Below are some of the characteristics of phishing as provided by SANS.

It is good to detect phishing but what if you’re tricked to click on a phishing link unknowingly?

Once you have provided your credentials to an attacker, there’s nothing you can do to prevent your account from being compromised. The only way to prevent providing your credentials to hackers is by using a passwordless login. A passwordless login is an authentication method that require no password to access an online service. The user only needs to proof who he/she claims to be by using either possession and/or inherence (e.g. Fingerprint) to login. This is by far, the most secure login method that exists today.

Phishing and similar attacks are not a threat to passwordless login, because there is no user interaction, no manual entry of data

The end user remains a critical link in the chain to stop breaches. User awareness programs should be initiated to combat the continued threat of phishing and related social engineering techniques.