The Slack message froze my blood: “Hey, are you able to approve this bill? Pressing!” My teammate Sarah had clicked a hyperlink mimicking our CFO’s signature. As our SOC workforce raced to comprise the breach, I stared on the malicious URL: https://payroll-company-invoices[.]com/login?redirect=azureonline[.]phish. That evening, I swore I’d construct one thing higher than reactive alerts.
Three months later, my customized phishing detector intercepted 12,000+ assaults earlier than they reached workers. Right here’s how I constructed it and how one can too.
Current options missed Sarah’s assault as a result of:
