19
©2020 Check Point Software Technologies Ltd. November 7 th 1940 Tacoma Washington USA 2

November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

November 7th 1940

Tacoma Washington USA

2

Page 2: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Page 3: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd. 4

Page 4: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Have we learned from our past?

5

Page 5: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Foundation of the Internet

The Wild WestPeople

ApplicationData

Presentation

Session

Network

Transport

Data Link

Physical

Data

Data

Segments

Packets

Frames

Bits

6

Page 6: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Lessons learned from theCheck Point Incident Response Team in 2019

7

Page 7: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Management needs to

embrace security

Security can no longer be:

Ignored

Partially implemented

Fully outsourced

Page 8: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Cloud is not automatic

security

Cloud requires a lot of

planning

and hard work

Page 9: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

293.6 billion emails per day

347.3 billion by 2023

55% of all email are spam

The average office worker receives 120 emails per day

Email marketing ROI: 3,200%

An emoji in the subject line will boost your open rate☻♥♥!!

10

Page 10: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Email

After almost 50 years email is still the most prolific source of threats

Credential Theft

Malware

Fraud and Theft

Phishing

Ransomware Trojans

SPAM 30% of cases45% of cases

Phishing

11

Page 11: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

Page 12: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

The Case:

Business Email Compromise Resulting in Fraudulent Wire Transfers

13

Page 13: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

THE TARGET

Financial sector- Investment Company

Location – Anywhere there is money

Losses - $1.5 Million

Customer did not know how the attack worked

Called Check Point Incident Response Team to investigate

14

Page 14: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd. 15

Page 15: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd. 16

Page 16: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd.

THE PHISH

Personalized for the recipient

Key personnel targeted – CEO and CFO

No massive phishing spam emails

Link is hosted on public cloud services

17

Page 17: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd. 18

Page 18: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd. 19

Page 19: November 7 1940 Tacoma Washington USA€¦ · Bits 6 ©2020 Check Point Software Technologies Ltd. Lessons learned from the Check Point Incident Response Team in 2019 7 ... THE PHISH

©2020 Check Point Software Technologies Ltd. ©2020 Check Point Software Technologies Ltd.

THANK YOU