Collaborate Disseminate
Abnormal Security released a report which examines the escalating adverse impact of socially-engineered and never-seen-before email attacks, and other advanced email threats—both financial and reputational—to organizations worldwide. The report surveye… Continue reading Increase in credential phishing and brute force attacks causing financial and reputational damage
Abnormal Security announced it has joined the Microsoft Intelligent Security Association (MISA). Abnormal was nominated for membership based on how its platform uses Microsoft Azure Active Directory APIs (SIGNIN, ALERT, USER, GROUP, DIRECTORYOBJECT, RI… Continue reading Abnormal Security joins MISA to help customers combat global cybersecurity threats
Criminal hackers will try almost anything to get inside a profitable enterprise and secure a million-dollar payday from a ransomware infection. Apparently now that includes emailing employees directly and asking them to unleash the malware inside their employer’s network in exchange for a percentage of any ransom amount paid by the victim company. Continue reading Wanted: Disgruntled Employees to Deploy Ransomware
Ransomware operators have taken their profession’s profitability to new heights in the last couple years by outsourcing their work with the “ransomware-as-a-service” model, in which hackers lease out their malware in exchange for shares of the resulting extortion payments. Now, a cyber firm has found a ransomware operator going one step further: asking prospective victim companies’ personnel to deploy ransomware on their behalf, then take a cut of the proceeds. Abnormal Security on Thursday said it recently blocked a batch of emails to its customers that solicited recipients to infect their employers’ networks with ransomware. Researchers set up a fake identity to communicate with the would-be ransomware/insider scheme mastermind — who went by the screen name “Pablo” — under the ruse that the persona would do Pablo’s criminal bidding. The incident, which occurred in mid-August, marks another tactical swerve in the ever-shifting world of ransomware techniques, and if Pablo’s to […]
The post Researchers nab wannabe ransomware scammer trying to convince victims to help hack their employer appeared first on CyberScoop.
A phishing campaign aimed at harvesting Office 365 account credentials is employing a variety of tricks to fool both email security sistems and recipients: the phishing emails come from a compromised enterprise account, through the secure email system … Continue reading Phishers using Zix to “legitimize” emails in the eyes of Office 365 users
Abnormal Security announced that it raised $50 million in Series B venture capital funding. Led by Menlo Ventures, with participation from early investor Greylock, the round brings Abnormal’s total funding to $75 million. Abnormal is disrupting the mar… Continue reading Abnormal Security raises $50M to double the size of its machine learning and data science teams
BEC attacks increased 15% quarter-over-quarter, driven by an explosion in invoice and payment fraud, Abnormal Security research reveals. “As the industry’s only measure of BEC attack volume by industry, our quarterly BEC research is important for CISOs… Continue reading BEC attacks increase in most industries, invoice and payment fraud rise by 155%
Abnormal Security announced a global strategic alliance with Microsoft to deliver comprehensive security solutions to enterprises. Customers can now purchase Abnormal’s security offering directly from Microsoft’s Azure Marketplace. Abnormal Security is… Continue reading Abnormal Security partners with Microsoft to deliver comprehensive security solutions to enterprises
Trends in BEC and email security during Q2 2020 included a peaking and plateauing of COVID-19-themed email attacks, an increase in BEC attack volume and acceleration of payment and invoice fraud, according to an Abnormal Security report. The report als… Continue reading Brand impersonation is a go-to tactic for attackers, especially for credential phishing and BEC attacks
Legacy applications don’t support modern authentication — and cybercriminals know this. Continue reading Attackers Horn in on MFA Bypass Options for Account Takeovers