3 ms·
What is the standard measures taken to protect against spear phishing? Mostly educating users and trying to filter out the mails? Palantir basically started th
by kriro 10y ago
What is the standard measures taken to protect against spear phishing? Mostly educating users and trying to filter out the mails?
Palantir basically started the red team in a position where they had successfully spear phished someone and that seems to be common practice. Is trying to protect against it just a waste of time and should the resources be invested into proper segmentation to protect against the successful spear phis case? Or are people usually 80/20ing this and taking anti spear phish measures but only to an extend that covers a lot of ground at relatively low cost/time?
- bobedybobbob 10y agoPhishing is generally 1. run a command or 2. give me your credentials. To prevent these you need good solid technical controls like U2F for password based authentication (which is origin bound). Similarly binary whitelisting will prevent most users from running rogue executables.