[bobjordan]

"Modern-day espionage operations have one big advantage: Instead of painstakingly planting agents in companies, digital spies are simply sending prepared emails."

We face this threat in my business - daily fishing attempts or schemes to get employees to open files. It never stops.

This is a primary reason when we started designing our new web app at bomquote.com a few years ago, we first focused on communication tools which reduce our use of email both internally and in our dealings with our customers.

Sure, there will be attempts to hack our app servers, but from my view we can deal with that easier than preventing our accounting admin from clicking on a well crafted email.

[mehdix]

Is there any business out there that does not use email?

[mtgx]

Using U2F security keys is one way to stop phishing if the app you're supposed to log into requires it.

https://krebsonsecurity.com/2018/07/google-security-keys-neu...

[tgsovlerkhgsel]

Unfortunately "phishing" nowadays is used to describe any kind of social engineering, including all variants of tricking the victim into executing malware on their machine.

U2F won't save you there, it will just make the attack a bit more annoying.