4 ms·
Ask HN: What's the best way to protect users from phishing attacks?
It seems like everyone has a story about their users getting phished nowadays. What are the best techniques to fight against this?
- caryd 8y agoTraining them to recognize it. Repeat training yearly or more.
- troquerre 8y agoDo you know any company that does this? That doesn't seem realistic but I hope I'm wrong here.
- ericsoderstrom 8y agoPlanet Money episode #886: The Price of a Hack [1] interviews a supervisor at a company who instituted required anti-phishing training, with good results. [1]: https://www.npr.org/templates/transcript/transcript.php?storyId=682331111 https://www.npr.org/templates/transcript/transcript.php?stor...
- todipa 8y agoMy brother used to do work for a large medical device company and they used to run these tests every quarter.
- greenyoda 8y agoI've even heard of companies that send fake phishing e-mails to their employees so they can see who clicks on the links (and presumably give them additional security training). The financial companies I deal with frequently send reminders to their customers saying that they will never ask for personal information in an e-mail or phone call, and asking customers to report any such incidents to their security team.
- rman666 8y agoPhishing tests are very common in many companies these days. There are many companies that can help with such tests. Google is your friend.