Increase in AI-Sophisticated Phishing and CEO Fraud Emails. Threats Originating from Emails Persist. In recent years, emails related to targeted attacks and Business Email Compromise (BEC), commonly known as CEO fraud, have increased, and the damage is expanding. In the 'Top 10 Information Security Threats 2025 [Organizations]' published by the IPA, 'Targeted attacks aiming for confidential information' ranked 4th and 'Business Email Compromise' ranked 9th. Cyberattacks originating from emails have become a major challenge for business continuity. Furthermore, the proliferation of Generative AI has led to a decrease in unnatural Japanese phrasing, allowing anyone to create more 'authentic' looking emails. It is becoming increasingly difficult to detect requests impersonating actual business partners or executives (CEO fraud), as well as payment or information export instructions hidden within business communications. In response, many companies conduct annual targeted email training. However, the operational burden of preparation, delivery, aggregation, and reporting is high for IT departments, and costs tend to rise. As a result, the training often becomes a mere formality. Additionally, it is difficult to track and manage the response status when employees actually report suspicious emails.

Barriers of Cost, Man-hours, and Customization: Why Conventional Email Training is Insufficient. Many companies and organizations implement 'email training' for employees as a countermeasure against targeted attack emails. While effective for raising awareness and improving skills, the cost and the heavy burden on the personnel in charge are major issues. Preparation, post-training verification, exclusion settings based on the email environment, creating scenarios for sophisticated attacks, and aggregating reception and click status require significant man-hours. Furthermore, many services lack flexibility in customizing content for different targets or make it difficult to check training results. Additional costs for advanced training or increased delivery volume can also hinder continuous implementation.

Introducing KIS MailMon: Training Workflow and Management Points with 150 New Adoptions in 3 Months (750 Cumulative). This seminar introduces 'KIS MailMon', a targeted attack email training service that helps reduce costs and the burden on training administrators while improving employee security awareness. KIS MailMon has been adopted by 150 companies in the three months from January to March 2026 (accumulating 750 companies since its release in October 2022). It features over 300 editable training scenarios, allowing for continuous training aligned with the latest attack methods. It also strengthens suspicious email reporting and management as a new feature. This helps streamline the reception and management of reports from employees, supporting the development of efficient workflows. The presentation will explain the operational image of KIS MailMon and its reporting/management functions with a demo. Those looking to reduce costs and operational burdens while streamlining suspicious email report handling are encouraged to attend.

FACT BOX

  • Source: PR TIMES
  • Category: Event
  • Products / services: KIS MailMon