DMARC Adoption Spikes, Higher Ed Remains Behind
As colleges and universities prepare for the fall semester, email protections against surging threats like BEC and phishing are lagging. Continue reading DMARC Adoption Spikes, Higher Ed Remains Behind
Category Archives: DMARC
A ‘New Age’ of Sophisticated Business Email Compromise is Coming
A new BEC threat group is heralding more sophisticated email scams that target organizations without DMARC and squeeze as much money out of victims as possible. Continue reading A ‘New Age’ of Sophisticated Business Email Compromise is Coming
First-Ever Russian BEC Gang, Cosmic Lynx, Uncovered
Researchers warn that Cosmic Lynx targets firms that don’t use DMARC and uses a “mergers and acquisitions” pretext that can lead to large sums of money being stolen. Continue reading First-Ever Russian BEC Gang, Cosmic Lynx, Uncovered
BofA Phish Gets Around DMARC, Other Email Protections
The June campaign was targeted and aimed at stealing online banking credentials. Continue reading BofA Phish Gets Around DMARC, Other Email Protections
Why we’re partnering with Twilio SendGrid for security and deliverability
Twilio SendGrid and Valimail have teamed up to provide customers with Valimail’s DMARC Monitor and Enforce solutions, which will help Twilio SendGrid customers further protect their domains from phishing and impersonation attacks. Valimail is alr… Continue reading Why we’re partnering with Twilio SendGrid for security and deliverability
Just how bad is the problem with fake sender identity?
For years, secure email gateways have been playing a cat and mouse game with phishers, countering email attacks by constantly scanning for malware, viruses, bad links, and poor sender IP reputations. That has worked reasonably well — until now. U… Continue reading Just how bad is the problem with fake sender identity?
7 common mistakes people make with DMARC
Interest in DMARC is growing exponentially, but most of the organizations that deploy DMARC don’t actually achieve its full anti-spoofing benefits. Here’s how to overcome the most common DMARC deployment challenges. In our conversations wit… Continue reading 7 common mistakes people make with DMARC
Domain spoofing declines as protective measures grow (research part 3)
Valimail’s data shows a slow decline in the rate of email spoofing through exact-domain impersonation over the past several years. In the last year it’s remained roughly level at about 1% of all email volume authenticated by Valimail. This … Continue reading Domain spoofing declines as protective measures grow (research part 3)
Which industries are doing best at email security? (research part 2)
The majority of the 933,000 domains with DMARC are owned by small companies, small nonprofits, or individuals. Perhaps companies with large IT budgets can do better at deploying DMARC and getting to enforcement? The answer: A little bit — but it … Continue reading Which industries are doing best at email security? (research part 2)
Email domains without DMARC enforcement spoofed nearly 4X as often
As of January 2020, nearly 1 million (933,973) domains have published DMARC records — an increase of 70% compared to last year, and more than 180% growth in the last two years. In addition, 80% of all inboxes worldwide do DMARC checks and enforce domai… Continue reading Email domains without DMARC enforcement spoofed nearly 4X as often