Pistachio’s large-scale phishing simulation study shows that phishing risk varies widely by industry and team, with tech, IT, and construction employees performing notably worse than financial services. The report stresses that in-house phishing tests should measure not just clicks, but also credential leakage and reporting, because low click rates can still hide real risk. #Pistachio #Teams #FinancialServices #Construction #IT
Keypoints
- Pistachio analyzed 2.47 million simulated phishing attempts across more than 123,000 employees.
- Tech development and IT users showed high click rates, while construction employees had the highest risk in some tests.
- Financial services performed better than all other sectors in click, leak, and report rates.
- Credential leakage, not clicking alone, is the real measure of phishing risk.
- Effective phishing training must be sustained over time and adapted to role and behavior.
Read More: https://www.securityweek.com/phishing-research-challenges-conventional-security-awareness-testing/