The article by Jan Kopriva makes a number of excellent points about why threat actors continue with these types of social engineering attacks – but the bottom line is that lack of training and awareness about phishing attacks in organisations means threat actors still make money from these attack vectors.
The article is worth a read – it does include a number of examples of phishing emails – as it will allow you to decide if you have done enough to protect your organisation.
If not – then it is time for you to take action – what about one of our Cyber Security Awareness Courses?
Clive Catton MSc (Cyber Security) – by-line and other articles