← All threats
HIGH
Phishing Campaign
Mass or targeted phishing campaign aiming to steal credentials or deliver payloads. Demands DMARC + SPF + DKIM enforcement, MFA on all accounts, security awareness training and URL filtering.
Mass or targeted phishing campaign aiming to steal credentials or deliver payloads. Demands DMARC + SPF + DKIM enforcement, MFA on all accounts, security awareness training and URL filtering.
MITRE ATT&CK
Tactics, Techniques & Procedures
TA0006 Credential Access
tactic
TA0001 Initial Access
tactic
Defensive mapping
Mapped controls
The audit will verify each of these controls is in place and effective.
| Control | Confidence | Why it matters |
|---|---|---|
| Email security gateway (DMARC, SPF, DKIM) suggested | 75% | Recommended control for phishing |
| MFA for all user accounts suggested | 75% | Recommended control for phishing |
| Security awareness training suggested | 75% | Recommended control for phishing |
| Phishing-resistant authentication suggested | 75% | Recommended control for phishing |
| URL filtering suggested | 75% | Recommended control for phishing |