PhishingBox is an online system for organizations to easily conduct simulated phishing attacks and educate their end users through awareness training. This helps identify vulnerabilities and mitigate risk. Our system is simple to use, cost-effective and helps clients reduce risk and achieve cybersecurity objectives.

1. WHAT IS PHISHING?
PHISHINGBOX PRESENTS

2. PHISHINGBOX
PHISHING IS A FAKE EMAIL
The long definition is that phishing is the
act of attempting to acquire information
such as usernames and passwords by
masquerading as a trustworthy entity in an
electronic communication.

3. IS PHISHING
A THREAT?

4. PHISHINGBOX

5. OF PHISHING EMAILS ARE OPENED.
PHISHINGBOX
30%
Source: Verizon 2016 Data Breach Report

6. AND IT IS
GETTING WORSE

7. PHISHINGBOX
PHISHING ATTACKS ARE ON THE RISE
In 2016, 1 in 131
emails sent were
malicious, the highest
rate in 5 year.
Source: Symantec Internet Security Report 2106

8. PHISHINGBOX
The latest Verizon data breach
report showed that Phishing
Attacks are on the rise, with
43% of data breaches
stemming from such incidents.
Source: 2016 Verizon Data Breach Investigations Report
PHISHING ATTACKS ARE ON THE RISE

9. PHISHINGBOX
PHISHING ATTACKS ARE ON THE RISE
The total number of phishing
attacks in 2016 was 1,220,523.
A 65% increase from
2015.
Source: Anti-Phishing Working Group Trends Report, Q4, 2016

10. PHISHING IN
THE NEWS

11. PHISHINGBOX
A Single Victim of a Phishing Attack Can
Have an Impact on Millions.

12. PHISHINGBOX

13. PHISHINGBOX
No Company is Immune!
Even the Government & Security Companies Can Fall Victim.

14. WHAT CAN
YOU DO?

15. PHISHINGBOX
COMMON PHISHING TRAITS
1. Generic Greeting
2. Invokes Fear
3. Requires Action
4. Threatening Language
5. Grammar Issues
6. Generic Closing

16. PHISHINGBOX
WHAT TO DO
‣ DO Hover Over Links to
Verify Its Location
‣ DO NOT Click on Unknown
Links
‣ DO NOT Reply to
Suspicious Requests
‣ DO Report the Suspected
Attack

17. PHISHINGBOX
THERE’S MORE
‣DO NOT rely on the “from” and “reply to” email
addresses, as they can be faked
‣BE SUSPICIOUS of unsolicited attachments
‣CONFIRM information out of band. That is, contact
the sender on a known line, email, website, or
other method.
‣DO NOT use information in the email

18. PHISHING ATTACKS ARE ONLY LIMITED TO
THE CREATIVITY OF THE ATTACKER.
When in Doubt, Ask Your Security Office.
DO NOT CLICK, RESPOND, OR
DOWNLOAD!