Specialists revealed which phishing emails Belarusians open most often. An invitation to a subbotnik became the leader
Most often, employees of Belarusian organizations open phishing emails related to ordinary work issues. This is evidenced by the results of educational phishing mailings by "Kaspersky Lab" for January — October 2026, presented at the "Cybersecurity — 2027" forum, writes BelTA.
The most effective bait turned out to be an invitation to a mandatory subbotnik: 23% of employees who received such an email clicked on the link. Messages about rescheduling working days and payslips interested 11% of recipients each.
Significantly less often, employees reacted to messages mimicking official communications. A fake message from the Information Protection Center interested 3% of recipients, a message about an undelivered email — 2%. Almost no one reacted to a message about the start of an unscheduled inspection. 1% of employees each clicked on links in emails about a new annual bonus system and an expansion of corporate services.
Cybersecurity experts note that attackers use work-related topics that evoke emotions and lower vigilance. For example, mandatory participation in a subbotnik or receiving a payslip. Messages related to work processes become a particularly effective bait for phishing attacks.
Emails posing as mailings from the HR department or internal services of an organization can be perceived as reliable by employees. Therefore, protection requires not only technical means but also regular staff training, as well as the habit of checking messages, even if they seem completely normal.
According to experts, employees' restrained reaction to some types of educational phishing may indicate that they have become more attentive to suspicious messages. However, in real attacks, fraudsters are increasingly using artificial intelligence to create convincing emails that are difficult to distinguish from genuine ones.
To reduce the risk of phishing attacks, specialists advise regularly training employees to recognize social engineering methods, updating software, and using means of protecting corporate mail and devices. It is also important to create complex, unique passwords for work accounts and store them in dedicated password managers.
Now reading
Killed his family while they slept, was interested in "Nazis and the Aryan race." What else is known about the case of the 24-year-old shooter in Krakow 1919
Comments