A few minutes ago Barbara Penland, Oak Ridge National Laboratory spokeswoman, issued an email saying, “We are delighted to announce that Internet connectivity has been restored at ORNL.”
Why is this news? Because on April 15, 2011, ORNL was taken off-line in response to a spear-phishing attack that compromised its systems.
As ORNL has learned, traditional security methods can’t detect and stop low volume, highly targeted spear-phishing email and training isn’t effective. What can be done to defend the enterprise against spear-phishing? The enterprise can adopt a tool that identifies trusted email so that the target of the spear-phishing attack can distinguish real email from fake email. That tool is SP Guard from Iconix.