Don’t Let Cybercriminals Trick You With Multi-Vector Attacks

Jake Wilson
WGU —  Education Technology
2 min readAug 9, 2022
A laptop computer opened slightly with half of the keyboard and a portion of the screen visible.
Photo by Andras Vas on Unsplash

We all know that cybercriminals create and send malicious phishing emails and make scam phone calls in an attempt to steal sensitive information. In fact, billions of phishing emails are sent every day, and phishing remains the number one attack vector for cyber criminals because it often leads to success. But did you know that cybercriminals can use multiple attack vectors at the same time to make their attacks even more effective? It’s sometimes fairly easy to spot a suspicious email or scam phone call, but simultaneous multi-vector attacks can be a bit more difficult to spot.

According to an IBM Security report, “The click rate for the average targeted phishing campaign was 17.8%, but targeted phishing campaigns that added phone calls (vishing or voice phishing) were three times more effective, netting a click from 53.2% of victims.” That’s a huge increase from the email-only click rate! By employing multiple attack vectors simultaneously, cybercriminals are able to create a sense of urgency and make their scams appear credible.

Don’t let cybercriminals trick you with their multi-vector attacks. Here are some tips to help you keep your information secure:

  • Always confirm that any message you receive is legitimate. Remember to stop and think before taking any action. It’s okay to contact the person or organization directly using an alternate method of communication.
  • Be on the lookout for various suspicious indicators when you receive an email or phone call. Many scams often create a sense of urgency or scare you into taking an action without thinking things through.
  • Keep in mind that cybercriminals are pretty good at launching multi-vector attacks in hopes of stealing sensitive information. Just because you receive a credible looking email in addition to a phone call, doesn’t mean it’s legitimate.

If you need additional help, check out the digital resources from the National Cybersecurity Alliance by visiting https://staysafeonline.org/resources/.

--

--

Jake Wilson
WGU —  Education Technology

Security Awareness Evangelist at Western Governors University.