How to Stop Phishing Emails from Putting Your Company at Risk

Posted by Stephen Ferrell
Stephen Ferrell

A phishing email from a Hempstead, New York man spoofed email addresses and tricked a Virginia trade association into authorizing payments to fake vendors. By the time officials caught on to his phishing scheme, the trade association was out $1.1 million.

A Phoenix man set up a fake website and used text messages and phishing emails to scam an Alabama credit union’s customers into divulging debit card numbers, security codes, and PINs. He loaded the info onto blank debit cards and went on a buying spree.

A Smyrna, Georgia man sent phishing emails requesting W-2 tax information for employees of a Connecticut school district. He used the information to file 100 fraudulent tax returns claiming tax refunded of $491,000.

All three of these men were arrested and sent to jail but not before the damage had been done. Each used different phishing email schemes to get past organization defenses.

Phishing emails are still the most popular method of attack for cybercriminals. It’s now a regular point of attack by organized crime and the numbers are staggering. The FBI estimates cybercriminals have been able to victimize businesses and steal more than $12 billion dollars over the past five years.

How to Stop Phishing Emails

Microsoft Office 365, Exchange and Google’s G Suite dominate the business email market. Together, they make up more than 99 percent of all business email solutions. While both email service providers have built-in email security filter, neither are effective to stop phishing emails. 

Existing solutions aren’t working. Cybercriminals are getting more sophisticated. It’s getting harder to tell what’s real and what’s fake. Many are so good the human eye can’t tell the difference. Employees miss the signs and take the bait. Despite educational efforts, 30 percent of phishing emails are still being opened by employees.

The only effective way to stop phishing emails is with INKY. That’s why organizations have turned to INKY for their anti-phishing solution”

INKY is the next generation of email protection. A cloud-based email protection software, it blocks spam, malware, and phishing attacks. It uses domain-specific machine learning and computer vision to identify and block even zero-day phishing emails that get through legacy systems.

How to Stop Getting Phishing Emails

INKY will automatically scan every incoming email looking for the warning signs. Malicious emails are quarantined. INKY adds a bold informational banner at the top of email when it’s delivered. This both protects your users and educates them at the same time.

INKY is Effective at Stopping Phishing Emails

How effective is INKY at filtering out phishing emails? Of the millions of phishing attempts that were processed by INKY’s proprietary email security platform in 2018, there were no successful attacks.

Whether emails are viewed on desktops, laptops, or mobile devices, INKY warns users. Other anti-phishing software puts the warning label at the end of the email’s header.  This might not be seen by users who don’t see it and click through to the phishing email. INKY puts the warning right in the top of the email so it won’t be missed. Users can click to see details, report the malicious email, or learn more.

INKY is effective at preventing your business from falling victim to these phishing attacks:

  • Spear Phishing
  • Zero Day Attacks
  • CEO Fraud
  • Brand Forgery
  • Domain Spoofing
  • Malware/SPAM
  • Ransomware

Unlike most anti-phishing software, INKY doesn’t just look at URLs and sender addresses, it also creates sophisticated behavior profiles and social graphs to match up to senders. If the email doesn’t match the profile, it is flagged. This is effective at stopping brand forgeries and spear phishing attacks. It also spots CEO fraud, responsible for billions of dollars of losses.

INKY’s intelligent algorithms can detect abnormalities in text, fonts, domain names, and logos. This stops domain spoofing and zero-day Business Email Compromise attacks other software can’t see.

Phishing emails are also the primary delivery mechanism for both malware and ransomware. INKY’s anti-malware protection includes state-of-the-art detection to ID and block infected content. INKY does a deep link inspection by simulating a click-through to every link including in the email. It then checks the destination for phishing signals and other malicious content. Executable code, such as cross-site scripting (XSS), JavaScript, and CSS attacks, that are embedded in emails are captured and blocked.

Mitigate Your Risks

You can’t afford to let phishing emails get through your systems.  The risks are simply too high. INKY’s email security platform is a generation ahead of anything else on the market today.

Get in touch with INKY today to schedule a personalized demo.

Topics: phishing emails