Managing phishing threats in an organization
Charles Ohaya · 2006
As more organizations do business on the Internet, phishers have become sophisticated with their social engineering techniques. With little effort, phishers target employees via electronic media such as email, websites, IRC and instant messaging, soliciting and capturing confidential information. The very high probability of stealing confidential information via these techniques instead of the traditional techniques (e.g. telephone), is very attractive to phishers and poses a serious threat to organizations. In this paper, we discuss types of phishing, why employees are susceptible to phishing, and suggest ways managers can protect their organizations.