The top keywords used in phishing email subject lines

Image: GettyImages/Maskot

In caller months, hacking groups person brought captious aspects of U.S. infrastructure to a halt, and phishing is simply a fashionable instrumentality successful cybercriminal's seemingly ever-expanding armamentarium of onslaught methods. On Wednesday, Expel released a report, highlighting the apical keywords utilized successful phishing effort taxable lines. Based connected the findings, employees whitethorn request to beryllium peculiarly wary of the seemingly innocuous emails successful their inboxes.

"Attackers are trying to instrumentality radical into giving them their credentials. The champion mode to bash this is to marque the email look legitimate, punctual 1 wide enactment and lace it with emotion - urgency oregon fearfulness of nonaccomplishment are the astir common," said Ben Brigida, director, SOC Operations, astatine Expel. "The actions are arsenic elemental arsenic 'go to this site' oregon 'open this file,' but the attacker wants you to beryllium moving excessively accelerated to halt and question if it's legitimate."

SEE: Security incidental effect policy (TechRepublic Premium)

Malicious emails: Top phishing effort keywords

To find this database of keywords, Expel looked astatine 10,000 malicious emails. In a blog station astir the findings, Expel said the keywords successful these taxable lines people 1 oregon aggregate themes successful an effort to "make recipients interact with the content." These themes see "imitating morganatic concern activities, generating a "sense of urgency" and cueing the "recipient to act."

Some of the apical listed phishing keywords are designed to imitate morganatic concern invoices. 

In order, the apical 3 specified taxable lines see "RE: INVOICE," "Missing Inv ####; From [Legitimate Business Name] and "INV####."

To adhd discourse to these phishing attempts disguised arsenic modular invoices, Expel said that "generic concern terminology doesn't instantly basal retired arsenic suspicious and maximizes relevance to the astir imaginable recipients by blending successful with morganatic emails, which presents challenges for information technology."

Per Expel, taxable lines highlighting newness are often utilized successful phishing attempts with examples including "New Message from ####, "New Scanned Fax Doc-Delivery for ####" and "New FaxTransmission from ####."

Adding discourse to this roundup of "new" taxable lines, Expel said legit communications and alerts regularly usage the word "new" to "raise the recipient's interest," adding that "people are drawn to caller things successful their inbox, wanting to marque definite they don't miss thing important."

SEE: How to negociate passwords: Best practices and information tips (free PDF) (TechRepublic)

Subject lines highlighting caller messages and further actions requirements are besides fashionable phishing methods, according to Expel, with phrasing focused connected expiration notices for emails and passwords, verification requirements and others.

"Keywords that beforehand enactment oregon a consciousness of urgency are favorites among attackers due to the fact that they punctual radical to click without taking arsenic overmuch clip to think. "Required" besides targets employees' consciousness of work to impulse them to rapidly instrumentality action," the station said.

Other apical phishing effort taxable lines see blank taxable lines, file/document sharing language, work and signifier requests, enactment requirements and eFax angles.

Spearphishing: Targeting circumstantial employees

On mean organizations volition look much than 700 societal engineering cyberattacks annually and 10% of the targeted attacks are concern email compromises (BEC), according to a July Barracuda Networks report; among societal engineering attacks analyzed by institution researchers, phishing represented 49%.

Interestingly, a person's relation astatine a institution whitethorn play a relation successful their hazard of being targeted by cybercriminals. For example, Barracuda Networks determined that IT professionals person an mean of 40 targeted phishing attacks annually and this fig jumps to 57 for CEOs.

Brigida said the taxable enactment enactment is "ideally" a task the email recipient does successful their day-to-day occupation truthful that the "request feels acquainted oregon routine."

"If a idiosyncratic is successful finance, they whitethorn autumn for an invoice-themed phish. If they are successful recruiting, they whitethorn autumn for a resume-themed phish," Brigida said. "The occupation of an attacker is to instrumentality the idiosyncratic into doing what they want, evading information detection tools successful the process by blending successful with emblematic concern activities."

Also spot

• Malicious bureau documents: The latest inclination successful cybercriminal exploitation (TechRepublic)
• Security threats connected the horizon: What IT pro's request to cognize (free PDF) (TechRepublic)
• Checklist: Securing integer information (TechRepublic Premium)
• Cybersecurity and cyberwar: More must-read coverage (TechRepublic connected Flipboard)