91% of Cyber Attacks start with email according to Microsoft, yet email is the least exciting area for us to focus our Cyber security efforts in.
Quote from The Register (ignore the sarcasm): “That being the case, why is Microsoft bothering to sound the alarm? Well, 91 per cent of all cyberattacks originate with email, according to Redmond. Clearly, phishing still works, as does selling security by pointing that out.”
Making sure that the source of an email is authentic is critical to preventing these scams, in the meantime Sandboxing is a decent mitigation preventing users from entering their credentials in the first place.