Spear Phishing: Novel Techniques for Detection and Prevention

Spear phishing is one of the most serious class of threats that IT security struggles with. While spear phishing attacks are seemingly straightforward, the variability of delivery and infection of the messages makes them remarkably difficult to detect and protect against. In this talk we present various tactics that we see used in spear phishing to subvert detection, such as specific encoding of subjects. We further present a new framework of detection techniques to flag these attacks.