[{"innerBlocks":[],"name":"core\/freeform","postId":127329,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"

The history (and future perils) of phishing <\/h2>
Cyberattacks are on the rise, and healthcare organizations continue to face constant attacks. Today, 92 percent of all malware is delivered via email, and spam represents half of all email, according to Avanan, an email security vendor. Malicious phishing attacks have increased 250 percent this year. These email-based attacks are getting more sophisticated and pervasive, leading to a rising focus on training and preventive measures. Creating an effective defense requires understanding how phishing has evolved over time and how hackers are crafting the attacks of the future.Avanan's information on phishing can be found here<\/a>.<\/p>

Email\u2019s beginnings<\/h2>
Message exchange via computer had its start in 1065, when MIT\u2019s Compatible Time-Sharing System stored shared files and messages on a central disk, and users were able to log in from remote terminals to access them. In 1971, ARPANET enabled users to send messages between different computers. A computer scientist, Ray Tomlinson, is credited with introducing the \u201c@\u201d symbol as a way to target messages to specific recipients. And in 1977, DARPA finalized the first email standard with ARPANET, including fields for \u201cTo\u201d and \u201cFrom\u201d and the ability to forward messages.<\/p>

Spam\u2014too much of a good thing<\/h2>
It wasn\u2019t long after that\u20141978, in fact\u2014that the first mass emailing occurred. An email was sent to 397 ARPANET users. This was so unpopular that no one attempted to send a mass email message for another decade. Those were the good old days\u2026Email became recognized as a security threat in 1988, when \u201cspamming\u201d was a prank started of multi-user dungeon games. Players would flood their rivals\u2019 accounts with junk email, crashing their systems and preventing them from playing. Thank goodness we have more powerful computers now that can handle vast quantities of email.<\/p>

It gets a name<\/h2>
In 1993, junk email was first referred to as spam, gaining the moniker from a skit of the same name by Monty Python, a British comedy group. To celebrate, two immigration lawyers sent a mass message advertising their services in 1994, acknowledged as the second such attempt at mass marketing spam.<\/p>

From annoyance to a big headache<\/h2>
In the 1990s, spam began to loom as a security threat, in part because email was never designed to be secure. In the 1990s, for example, random credit card generators began to emerge, used to generate credit card numbers to open accounts with America Online. In addition, individual accounts were hacked to send even more phishing messages to a victim\u2019s contacts.In fact, the term \u201cphishing\u201d first emerged in January 1996 on an AOL message board.<\/p>

No one loved this virus<\/h2>
In 2000, The ILOVEYOU Virus was distributed, eventually infecting 45 million Windows-based PCs. Unsuspecting recipients opened an attachment to an email, unleashing a worm that overwrote image files and sent itself to all of a victim\u2019s Outlook contacts.The next year, the Sircam virus did significant damage to victims\u2019 PCs. It had the ability to change email subjects and file names, making it harder to stop. The virus copied itself into an existing file on the user\u2019s computer and sent itself to the victim\u2019s email contacts, while a second file in the PC\u2019s recycling bin would write text until the hard drive was filled.<\/p>

Efforts emerge to blunt the attacks<\/h2>
In 2002, the European Union and the U.S. passed laws banning direct marketing emails without the prior consent of recipients. These have been largely ineffective. In addition, anti-spam security technology solutions were introduced in 2002. Even so, the number of spam emails exceeded legitimate email for the first time in 2003.<\/p>

Domain spoofing gets fancy<\/h2>
In 2003, as exemplified by the MiMail Computer Worm, hackers began to use domain spoofing to make it look like an email was coming from a trusted company or business partner. Clicking a link in an email triggered a popup window, and when recipients attempted to log in, their user name and password were sent to the hackers. In 2004, deceptive fund-raising emails were sent to supporters of John Kerry; their donations went instead to scammers who didn\u2019t have any connection to the campaign. By 2005, anti-spam programs started verifying senders to prevent domain spoofing.<\/p>

Cloud impacts interactions with email<\/h2>
Since 2006, technology has changed how we interact with email\u2014in addition to hosting email services, the cloud offers the ability to introduce security to that cloud.However, the risk of phishing attacks still looms large. For example, in 2009, attackers mount Operation Phish Phry to steal $1.5 million using phished log-in credentials and account details. The attack targeted thousands of account holders of banks in the U.S.<\/p>

Big-time results from phishing<\/h2>
The effects of phishing gained national prominence beginning in 2013. That\u2019s when hackers gained access to the payment data of 110 million shoppers of Target. The hackers aimed their attack at employees of Target\u2019s HVAC vendor. That gambit allowed entry into Target\u2019s information systems.Even more famously, Russian hackers sent phishing emails to the staff of the Clinton campaign over two weeks. A single employee was fooled into giving login credentials, which enabled them to eventually access the entire network of the DNC, steal crucial emails that were later leaked, and probably influenced the outcome of the 2016 election.<\/p>

Rising risks for business operations <\/h2>
As the Internet becomes pervasive in enabling organizations to function better, phishing risks are rising. \u201cInformation technology and business are becoming inextricably interwoven,\u201d notes Bill gates. \u201cI don\u2019t think anybody can talk meaningfully about one without talking about the other.\u201dThe use of the cloud poses significant risks. For example, Office365 had nearly 150 million users in 2018, while Google and its G-suite boasts of more than 1.5 billion users. Not surprisingly, threats to cloud security in Office365 has increased 63 percent from 2017.<\/p>

Massive security risks<\/h2>
This year, nearly 4.7 billion phishing emails are sent every day, Avanan\u2019s report says. In 2018 the FBI received nearly 50,000 reports of phishing and compromised email, costing a total of $1.8 billion.<\/p>

","saveContent":"
The history (and future perils) of phishing <\/h2>
Cyberattacks are on the rise, and healthcare organizations continue to face constant attacks. Today, 92 percent of all malware is delivered via email, and spam represents half of all email, according to Avanan, an email security vendor. Malicious phishing attacks have increased 250 percent this year. These email-based attacks are getting more sophisticated and pervasive, leading to a rising focus on training and preventive measures. Creating an effective defense requires understanding how phishing has evolved over time and how hackers are crafting the attacks of the future.Avanan's information on phishing can be found here<\/a>.<\/p>

Email\u2019s beginnings<\/h2>
Message exchange via computer had its start in 1065, when MIT\u2019s Compatible Time-Sharing System stored shared files and messages on a central disk, and users were able to log in from remote terminals to access them. In 1971, ARPANET enabled users to send messages between different computers. A computer scientist, Ray Tomlinson, is credited with introducing the \u201c@\u201d symbol as a way to target messages to specific recipients. And in 1977, DARPA finalized the first email standard with ARPANET, including fields for \u201cTo\u201d and \u201cFrom\u201d and the ability to forward messages.<\/p>

Spam\u2014too much of a good thing<\/h2>
It wasn\u2019t long after that\u20141978, in fact\u2014that the first mass emailing occurred. An email was sent to 397 ARPANET users. This was so unpopular that no one attempted to send a mass email message for another decade. Those were the good old days\u2026Email became recognized as a security threat in 1988, when \u201cspamming\u201d was a prank started of multi-user dungeon games. Players would flood their rivals\u2019 accounts with junk email, crashing their systems and preventing them from playing. Thank goodness we have more powerful computers now that can handle vast quantities of email.<\/p>

It gets a name<\/h2>
In 1993, junk email was first referred to as spam, gaining the moniker from a skit of the same name by Monty Python, a British comedy group. To celebrate, two immigration lawyers sent a mass message advertising their services in 1994, acknowledged as the second such attempt at mass marketing spam.<\/p>

From annoyance to a big headache<\/h2>
In the 1990s, spam began to loom as a security threat, in part because email was never designed to be secure. In the 1990s, for example, random credit card generators began to emerge, used to generate credit card numbers to open accounts with America Online. In addition, individual accounts were hacked to send even more phishing messages to a victim\u2019s contacts.In fact, the term \u201cphishing\u201d first emerged in January 1996 on an AOL message board.<\/p>

No one loved this virus<\/h2>
In 2000, The ILOVEYOU Virus was distributed, eventually infecting 45 million Windows-based PCs. Unsuspecting recipients opened an attachment to an email, unleashing a worm that overwrote image files and sent itself to all of a victim\u2019s Outlook contacts.The next year, the Sircam virus did significant damage to victims\u2019 PCs. It had the ability to change email subjects and file names, making it harder to stop. The virus copied itself into an existing file on the user\u2019s computer and sent itself to the victim\u2019s email contacts, while a second file in the PC\u2019s recycling bin would write text until the hard drive was filled.<\/p>

Efforts emerge to blunt the attacks<\/h2>
In 2002, the European Union and the U.S. passed laws banning direct marketing emails without the prior consent of recipients. These have been largely ineffective. In addition, anti-spam security technology solutions were introduced in 2002. Even so, the number of spam emails exceeded legitimate email for the first time in 2003.<\/p>

Domain spoofing gets fancy<\/h2>
In 2003, as exemplified by the MiMail Computer Worm, hackers began to use domain spoofing to make it look like an email was coming from a trusted company or business partner. Clicking a link in an email triggered a popup window, and when recipients attempted to log in, their user name and password were sent to the hackers. In 2004, deceptive fund-raising emails were sent to supporters of John Kerry; their donations went instead to scammers who didn\u2019t have any connection to the campaign. By 2005, anti-spam programs started verifying senders to prevent domain spoofing.<\/p>

Cloud impacts interactions with email<\/h2>
Since 2006, technology has changed how we interact with email\u2014in addition to hosting email services, the cloud offers the ability to introduce security to that cloud.However, the risk of phishing attacks still looms large. For example, in 2009, attackers mount Operation Phish Phry to steal $1.5 million using phished log-in credentials and account details. The attack targeted thousands of account holders of banks in the U.S.<\/p>

Big-time results from phishing<\/h2>
The effects of phishing gained national prominence beginning in 2013. That\u2019s when hackers gained access to the payment data of 110 million shoppers of Target. The hackers aimed their attack at employees of Target\u2019s HVAC vendor. That gambit allowed entry into Target\u2019s information systems.Even more famously, Russian hackers sent phishing emails to the staff of the Clinton campaign over two weeks. A single employee was fooled into giving login credentials, which enabled them to eventually access the entire network of the DNC, steal crucial emails that were later leaked, and probably influenced the outcome of the 2016 election.<\/p>

Rising risks for business operations <\/h2>
As the Internet becomes pervasive in enabling organizations to function better, phishing risks are rising. \u201cInformation technology and business are becoming inextricably interwoven,\u201d notes Bill gates. \u201cI don\u2019t think anybody can talk meaningfully about one without talking about the other.\u201dThe use of the cloud poses significant risks. For example, Office365 had nearly 150 million users in 2018, while Google and its G-suite boasts of more than 1.5 billion users. Not surprisingly, threats to cloud security in Office365 has increased 63 percent from 2017.<\/p>

Massive security risks<\/h2>
This year, nearly 4.7 billion phishing emails are sent every day, Avanan\u2019s report says. In 2018 the FBI received nearly 50,000 reports of phishing and compromised email, costing a total of $1.8 billion.<\/p>

","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Massive security risks<\/h2>This year, nearly 4.7 billion phishing emails are sent every day, Avanan\u2019s report says. In 2018 the FBI received nearly 50,000 reports of phishing and compromised email, costing a total of $1.8 billion.<\/p>","saveContent":"

The history (and future perils) of phishing <\/h2>

Massive security risks<\/h2>
This year, nearly 4.7 billion phishing emails are sent every day, Avanan\u2019s report says. In 2018 the FBI received nearly 50,000 reports of phishing and compromised email, costing a total of $1.8 billion.<\/p>

","saveContent":"

The history (and future risks) of phishing attacks

More for you