ASHRAE Journal - February 2023 - 20

CYBERSECURITY
Column
Mike Galler
They're Phishing for You
Be the One
That Got Away!
MIKE GALLER, MEMBER ASHRAE
Cybersecurity has been a topic of increasing importance to the building services
community for several years. While fully securing large and complex building
systems can be complicated, some basic precautions can easily be applied to any
system, and some basic precautions can be implemented by the users of any system.
This column will briefly explore an important aspect of cybersecurity that can affect
both information technology (IT) and operational technology (OT) networks-a type
of attack called phishing.
What is Phishing?
Phishing attacks are a type of social engineering attack
where criminals attempt to obtain information from
victims, or trick victims into giving the attackers access
to their computers or networks. The information may be
personal (i.e., financial, social security number) or business
(i.e., business secrets, plans, data or passwords). If
given access the attackers can then install malware on
the victims' systems and use them for further attacks.
How Big a Problem is Phishing?
Phishing accounts for 90% of data breaches
and is considered one of the top cybersecurity
risks. Phishing attacks were reported by 83% of
organizations.1 The average cost to an organization to
recover from a successful attack is over $4 million.2
Who is Targeted by Phishing?
Anyone can be the target of a phishing attack. Just as
20
ASHRAE JOURNAL ashrae.o rg
F E B R U A RY 2023
How is Phishing Done?
Phishing attacks may come in many forms, including
e-mail, social media, phone or text message. The message
or caller may claim to be from a bank, credit card or
other financial institution. They may claim to urgently
need your account number, credit card number, a
Mike Galler is an engineer at the National Institute of Standards and Technology in
Gaithersburg, Md.
someone who is actually fishing would rarely target a
specific fish when throwing out a line or a net, phishers
will catch anyone they can when they are sending
out most attacks, but there is no size limit for them.
Targeted attacks, often called spear phishing or whaling,
may be directed at an individual high value target such
as a system administrator or C-level executive. Targeted
attacks may be customized for the victim and are more
difficult to spot. They are less common due to the
additional effort required.

http://ashrae.org

ASHRAE Journal - February 2023

Table of Contents for the Digital Edition of ASHRAE Journal - February 2023

Contents
ASHRAE Journal - February 2023 - Intro
ASHRAE Journal - February 2023 - Cover1
ASHRAE Journal - February 2023 - Cover2
ASHRAE Journal - February 2023 - 1
ASHRAE Journal - February 2023 - Contents
ASHRAE Journal - February 2023 - 3
ASHRAE Journal - February 2023 - 4
ASHRAE Journal - February 2023 - 5
ASHRAE Journal - February 2023 - 6
ASHRAE Journal - February 2023 - 7
ASHRAE Journal - February 2023 - 8
ASHRAE Journal - February 2023 - 9
ASHRAE Journal - February 2023 - 10
ASHRAE Journal - February 2023 - 11
ASHRAE Journal - February 2023 - 12
ASHRAE Journal - February 2023 - 13
ASHRAE Journal - February 2023 - 14
ASHRAE Journal - February 2023 - 15
ASHRAE Journal - February 2023 - 16
ASHRAE Journal - February 2023 - 17
ASHRAE Journal - February 2023 - 18
ASHRAE Journal - February 2023 - 19
ASHRAE Journal - February 2023 - 20
ASHRAE Journal - February 2023 - 21
ASHRAE Journal - February 2023 - 22
ASHRAE Journal - February 2023 - 23
ASHRAE Journal - February 2023 - 24
ASHRAE Journal - February 2023 - 25
ASHRAE Journal - February 2023 - 26
ASHRAE Journal - February 2023 - 27
ASHRAE Journal - February 2023 - 28
ASHRAE Journal - February 2023 - 29
ASHRAE Journal - February 2023 - 30
ASHRAE Journal - February 2023 - 31
ASHRAE Journal - February 2023 - 32
ASHRAE Journal - February 2023 - 33
ASHRAE Journal - February 2023 - 34
ASHRAE Journal - February 2023 - 35
ASHRAE Journal - February 2023 - 36
ASHRAE Journal - February 2023 - 37
ASHRAE Journal - February 2023 - 38
ASHRAE Journal - February 2023 - 39
ASHRAE Journal - February 2023 - 40
ASHRAE Journal - February 2023 - 41
ASHRAE Journal - February 2023 - 42
ASHRAE Journal - February 2023 - 43
ASHRAE Journal - February 2023 - 44
ASHRAE Journal - February 2023 - 45
ASHRAE Journal - February 2023 - 46
ASHRAE Journal - February 2023 - 47
ASHRAE Journal - February 2023 - 48
ASHRAE Journal - February 2023 - 49
ASHRAE Journal - February 2023 - 50
ASHRAE Journal - February 2023 - 51
ASHRAE Journal - February 2023 - 52
ASHRAE Journal - February 2023 - 53
ASHRAE Journal - February 2023 - 54
ASHRAE Journal - February 2023 - 55
ASHRAE Journal - February 2023 - 56
ASHRAE Journal - February 2023 - 57
ASHRAE Journal - February 2023 - 58
ASHRAE Journal - February 2023 - 59
ASHRAE Journal - February 2023 - 60
ASHRAE Journal - February 2023 - 61
ASHRAE Journal - February 2023 - 62
ASHRAE Journal - February 2023 - 63
ASHRAE Journal - February 2023 - 64
ASHRAE Journal - February 2023 - 65
ASHRAE Journal - February 2023 - 66
ASHRAE Journal - February 2023 - 67
ASHRAE Journal - February 2023 - 68
ASHRAE Journal - February 2023 - 69
ASHRAE Journal - February 2023 - 70
ASHRAE Journal - February 2023 - 71
ASHRAE Journal - February 2023 - 72
ASHRAE Journal - February 2023 - Cover3
ASHRAE Journal - February 2023 - Cover4
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XGMDXI
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_YELQLJ
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QJLWMC
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_MCDEBX
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_WNYSQY
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XATVOD
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_FJSHSS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_CCBZDS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XDEFVG
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2023november_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2023november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_VHGNBL
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_WPKBNJ
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_UUVCDE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RTGDEW
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2023
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_LKRFXS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_AZSOFG
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ERCDBH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QWDFRV
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JHGVDF
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OPUYHG
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SREIBM
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_LRTGLK
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OKRFGH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2022november_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2022november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_TZSERA
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_LVRUIX
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RPTVYZ
https://www.nxtbook.com/nxtbooks/ashrae/mini_pub_catalog
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XIYTGD
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2022
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RFGDOB
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_PABXNU
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_REMKLS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_PICVBT
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_AOYTVW
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JQOPLS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_IOYTBC
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SGAJJF
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_IGHYER
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_PDRKLS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2021november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2021november_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XCODFR
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QSLFGO
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ILKVNM
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2021
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OPDJKD
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_VJKSRY
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SDHUTC
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JPPKRR
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SDLTTH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_CKLLES
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SLDOX
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_HJETUK
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OLUHGE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2020october
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2020october_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ZERDGH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QVMNEO
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RTPOKE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_BBATRE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_STUBMW
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_TPEMPE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JNMKDS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_FBTTPA
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_WQMMNE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_TVBRYN
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_showguide2020
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_KTUZMA
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ABEDGD
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201910
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201909
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2019septmeber_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2019september
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201908
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201907
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201906
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201905
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201904
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2019april
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201903
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2019march
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201902
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201901
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_showguide2019
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2018december
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2018november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2018fall_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2018fall
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2018october
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2018
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201810
https://www.nxtbook.com/nxtbooks/ashrae/ashraeinsights_201806
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201805
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201804
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201803
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201712
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201711
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201710
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2017fall_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2017fall
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201709
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201705
https://www.nxtbook.com/nxtbooks/ashrae/ashrae_meetinginsert_201610
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2016fall_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2016fall
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_acrexindia
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2015summer_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2015summer
https://www.nxtbook.com/nxtbooks/amca/2014summer2
https://www.nxtbook.com/nxtbooks/amca/2014summer
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_acma_2014summer
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201311
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201309
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_acmasupp_2013fall
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201305
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201303
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2013winter
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201211
https://www.nxtbook.com/nxtbooks/ashrae/achr_expo_mexico2012
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201209
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201208_v3
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201208_v2
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2012summer
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201205
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201203
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2012winter
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201111_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201109_v2
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2011summer
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201105
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201103
https://www.nxtbookmedia.com