Sophos Introduces Phish Threat Attack Simulator with Analytics and Training to Help IT Organizations Combat Low Security Awareness Among End-Users

Information Technology Press Releases Friday April 21, 2017 13:34
Bangkok--21 Apr--Sophos
  • Sophos Phish Threat is an advanced security testing and training platform designed to reduce risk from IT's largest attack surface – the end-user
  • Allows IT managers to more effectively address threat prevention by targeting risky user behavior and creating a stronger security culture across the entire organization
  • Integrated with cloud-based management platform Sophos Central for improved ease of use and synchronised security protection benefits

Sophos (LSE:SOPH), a global leader in network and endpoint security, today launched Sophos Phish Threat, an advanced phishing attack simulator and training solution that is fully integrated with the company's cloud-based security management platform, Sophos Central. With centralised management and automated campaign analysis, Phish Threat dramatically reduces the time and resources required to affect real change in employee behaviour when faced with sophisticated and rapidly evolving cybercrime techniques.

Phishing remains one of the most common attack vectors for hackers who exploit end-user behaviour as the weakest link in a company's cyber-defenses. Traditional online security training programs are academic, blind to the current attack landscape and disconnected from the rest of IT security management, making it burdensome for IT managers to effectively integrate anti-phishing into routine risk assessments. Sophos Phish Threat automates the entire training process and provides visual analytics to identify vulnerable users. The Sophos Phish Threat attack simulator and training platform is managed alongside other Sophos security solutions within Sophos Central to provide rapid risk detection and incident response.

"Phishing has evolved in lockstep with the 'Malware-as-a-Service' phenomenon," commented Bill Lucchini, senior vice president and general manager for the Sophos Cloud Security Group. "For years, criminals have disguised attacks in email and today SophosLabs sees phishing emails as a primary delivery method for ransomware payloads. Preventing users from succumbing to phishing attacks can seem like an uphill battle. However, with Sophos Phish Threat, IT managers now have sophisticated, integrated threat intelligence that combines the strength of Sophos security technologies with a product that tests, trains and analyses human vulnerabilities. This creates a very powerful solution for businesses struggling to keep ahead of organised cybercrime and unwary end-users."

Sophos acquired the Phish Threat technology in late 2016 from penetration test and risk assessment consultancy Silent Break Security and has since integrated the product into the Sophos Central platform. "I noticed a discrepancy between the way cyber-attacks were being conducted in the wild and what the private sector was calling a 'penetration test,'" commented Brady Bloxham, founder and former CEO of Silent Break Security. "We built Phish Threat to replicate the mindset of a real attacker, using the complicated methods and techniques in use today. This means assessments are modeled after potential attacks that organisations may face from real hackers. We also wanted to make it more transparent and easier for IT to collate and analyse results – something we hadn't found in other tools." Bloxham and the core engineers who initially developed the technology have joined the Sophos Cloud Security Group.

Sophos Phish Threat enables IT managers to create authentic phishing simulation and training sessions, and initiates course corrections for their employees. This helps end-users better recognise what a phishing attack looks like and learn from their mistakes should they get lured into taking the bait. As attacks change with current events, changing seasons and attacker methodologies, Sophos Phish Threat constantly updates its testing framework to reflect real-world threats. IT managers can craft bespoke simulation campaigns for office locations worldwide, just as many cybercriminals are now designing threats tailored by geography.

"Today's phishing attacks are so prevalent and so convincing that organisations of all types and sizes come to us asking how they can just stop employees from clicking on those emails and prevent an attack from slipping onto the network," said Karl Bickmore, CEO at Snap Tech IT, a Sophos partner based in Phoenix, Ariz. "Being able to stop a zero-day attack with next-generation endpoint security such as Sophos Intercept X is a valuable line of defense, but being able to reduce the number of security threats that reach your network in the first place by simply educating employees can dramatically reduce risk and improve security confidence across an organisation."

"Consumer confidence has been rocked by the high profile data breaches that have occurred in recent months, and many of our customers are asking how they can effectively introduce higher standards of security awareness in their business without introducing complicated solutions that require close management and constant updates in order to be effective," added Shane Swanson, COO at ARRC Technology, a Sophos partner based in Bakersfield, Calif. "By adding Phish Threat to Sophos Central, Sophos has made it easy for our customers to integrate an additional component of security without adding to the management overhead. It increases the trust our customers have in our team and our solutions."

Several flagship Sophos products are already available through the Sophos Central management platform including the next-generation XG Firewall, Sophos Endpoint Security, Sophos Intercept X, Sophos Email Security, Sophos Server Protection and Sophos SafeGuard Encryption. Sophos Phish Threat is the latest addition to the Sophos Central management platform.

Pricing and availability details can be requested from Sophos Partners worldwide.

Latest Press Release

Huawei Inks MoU with DE Ministry To Accelerate Digital Transformation Thailand#s Eastern Economic Corridor Chosen as Location for Its Leading-edge Cloud Data Center in Southeast Asia

Today, the Thai Ministry of Digital Economy and Society and Huawei Thailand signed a Memorandum of Understanding (MoU) on "Public-Private Collaboration on Digital Transformation to Move Thailand 4.0 Forward", with the aim to extend further cooperation in...

Commercial Aviation leads the way in leveraging digital transformation Augmented reality identified as key technology to mitigate aircraft downtime

IFS, the global enterprise applications company, today announced the commercial aviation industry-specific results of its Digital Change Survey. The study found that the aviation sector is more advanced in leveraging digital transformation than the other...

Huawei Helps China Insurance Giant CPIC Leads in the Digital Era

"For traditional financial services companies, digitalization is neither a label nor a trend, but a key factor that is crucial to the long-time survival of an enterprise. The CPIC digital strategy aims to innovate business models by leveraging technical...

iPhone X arrives at AIS on November, 24, 2017

AIS today announced it will offer iPhone X, the future of the smartphone, featuring a revolutionary new design with a stunning all-screen display. Customers will be able to pre-order iPhone X beginning November, 17, 2017 at www.ais.co.th/iPhoneX and it...

3D at Your Fingertips - Wacom unveils the Pro Pen 3D for intuitive creating, sculpting and designing

Today Wacom announced the Wacom Pro Pen 3D, a digital pen equipped with new features empowering professional designers and artists to bring their best work to life. Designed for use on a Wacom MobileStudio Pro, Cintiq Pro or the 2017 Intuos Pro pen...

Related Topics