Detecting and characterizing lateral phishing at scale

We present the first large-scale characterization of lateral phishing attacks, based on a dataset of 113 million employee-sent emails from 92 enterprise organizations. In a lateral phishing attack, adversaries leverage a compromised enterprise account to send phishing emails to other users, benefit-ting from both the implicit trust and the information in the hijacked user's account. We develop a classifier that finds hundreds of real-world lateral phishing emails, while generating under four false positives per every one-million employee-sent emails. Drawing on the attacks we detect, as well as a corpus of user-reported incidents, we quantify the scale of lateral phishing, identify several thematic content and recipient targeting strategies that attackers follow, illuminate two types of sophisticated behaviors that attackers exhibit, and estimate the success rate of these attacks. Collectively, these results expand our mental models of the 'enterprise attacker' and shed light on the current state of enterprise phishing attacks

Collaborative Preference: The Role of Homophily, Multiplexity, and Advantageous Network Position across Small and Medium-sized Organizations

The purpose of this paper is to examine collaboration between individuals across organizations. While both for profit and not-for-profit organizations utilize collaborative efforts, the factors that are important for bringing individuals and businesses together for collaboration still remain somewhat unresolved. In this paper, colleague similarity, the quality of pre-existing relationships, and the relative power of the other colleague are all examined for their correlation with the desirability of collaboration with that individual. In a study of pastors of small and medium sized churches in a southwestern protestant conference, we examined these areas through the lenses of homophily theory, multiplicity theories, and network positioning theories and found support for each of our hypotheses. Implications for management as well as future research directions are also presented

Hydrographic conditions along the western Iberian margin during marine isotope stage 2

The surface water hydrography along the western Iberian margin, as part of the North Atlantic's eastern boundary upwelling system, consists of a complex, seasonally variable system of equatorward and poleward surface and subsurface currents and seasonal upwelling. Not much information exists to ascertain if the modern current and productivity patterns subsisted under glacial climate conditions, such as during marine isotope stage (MIS) 2, and how North Atlantic meltwater events, especially Heinrich events, affected them. To help answer these questions we are combining stable isotope records of surface to subsurface dwelling planktonic foraminifer species with sea surface temperature and export productivity data for four cores distributed along the western and southwestern Iberian margin (MD95-2040, MD95-2041, MD99-2336, and MD99-2339). The records reveals that with the exception of the Heinrich events and Greenland Stadial (GS) 4 hydrographic conditions along the western Iberian margin were not much different from the present. During the Last Glacial Maximum (LGM), subtropical surface and subsurface waters penetrated poleward to at least 40.6°N (site MD95-2040). Export productivity was, in general, high on the western margin during the LGM and low in the central Gulf of Cadiz, in agreement with the modern situation. During the Heinrich events and GS 4, on the other hand, productivity was high in the Gulf of Cadiz and suppressed in the upwelling regions along the western margin where a strong halocline inhibited upwelling. Heinrich event 1 had the strongest impact on the hydrography and productivity off Iberia and was the only period when subarctic surface waters were recorded in the central Gulf of Cadiz. South of Lisbon (39°N), the impact of the other Heinrich events was diminished, and not all of them led to a significant cooling in the surface waters. Thus, climatic impacts of Heinrich events highly varied with latitude and the prevailing hydrographic conditions in this region