DemoBlade

SAN FRANCISCO, August 30, 2021 –<a href="https://abnormalsecurity.com/?utm_source=press&amp;utm_medium=link&amp;utm_campaign=2020-funding-announcement"> Abnormal Security</a>, provider of a leading cloud-native email security platform that leverages behavioral data science to stop modern email attacks, today released its Q3 2021 Email Threat Report. It examines the escalating adverse impact of socially-engineered and never-seen-before email attacks, and other advanced email threats—both financial and reputational—to organizations worldwide. The report surveyed advanced email attacks across eight major industry sectors, including retail and consumer goods; manufacturing; technology; energy and infrastructure services; medical; media and television; finance; and hospitality. 
Key report findings include:
<ul><li>32.5% of all companies were targeted by <a href="/glossary/brute-force-attack">brute force attacks</a> in early June 2021</li><li>137 account takeovers occurred per 100,000 mailboxes for members of the C-suite</li><li>61% of organizations experienced a vendor email compromise attack this quarter</li><li>22% more business email compromise attacks since Q4 2020</li><li>60% chance of a successful account takeover each week for organizations with 50,000+ employees</li><li>73% of all advanced threats were credential phishing attacks</li><li>80% probability of attack every week for retail and consumer goods, technology, and media and television companies</li></ul>
Over the course of the quarter, Abnormal researchers saw a significant increase in credential phishing, as well as brute force attacks, which are used to obtain personal information such as passwords, passphrases and usernames through a string of continuous, automated attempts. Once accessed, compromised accounts can be leveraged to send additional attacks on coworkers, partners and vendors, and provide the credentials necessary to infiltrate other parts of the organization. 
Credential phishing and account takeover is also a major issue because it provides the access needed to send other more nefarious types of attacks such as ransomware and malware. 
“Socially-engineered attacks are dramatically rising within enterprises, worldwide, creating unprecedented financial and reputational risks,” said Evan Reiser, CEO, Abnormal Security. “These never-before-seen attacks are becoming more sophisticated with every passing day. They don’t contain indicators of compromise, such as links, attachments and reputational risks, so they evade secure email gateways and other traditional email infrastructure, landing in inboxes where unsuspecting employees fall victim to their schemes, which include ransomware. In order to effectively protect against these attacks, we can no longer rely only upon established threat intelligence. We need to to look farther to comprehensively understand employee and vendor identities, their relationships, all with deep context, including content and tone to baseline good behavior. Any subtle deviations from this baseline expose the possibility of a threat or attack.”
The report also underlines that impersonation is on the rise, with threat actors using both well-known brands and internal automated systems to trick their victims into submitting credentials, revealing sensitive data, or sending money. In fact, impersonation of internal systems like IT Help Desk and IT Support rose 46% over the past two quarters. This increase in specific types of impersonation shows the extent to which cybercriminals are willing to change their tactics, and highlights the need for an email security system that will detect ever-evolving threats.
Download the complete report at: <a href="https://info.abnormalsecurity.com/threat">https://info.abnormalsecurity.com/threat</a>
To learn more about the Abnormal Security Email Security Platform, please visit:<a href="https://abnormalsecurity.com/product/">https://abnormalsecurity.com/product/</a>. 
About Abnormal Security
Abnormal Security provides a leading cloud-native email security platform that leverages AI-based behavioral data science to stop socially-engineered and never-seen-before email attacks that evade traditional Secure Email Gateways (SEGs). Abnormal delivers a fundamentally different approach that precisely detects and protects against the widest range of attacks including phishing, malware, ransomware, social engineering, spam and graymail, supply chain compromise, and internal account compromise. The Abnormal platform delivers inbound email security, internal and external account takeover protection, and full SOC automation. Abnormal’s API-based approach enables customers to get up and running in 15 minutes and can augment a SEG or be used standalone to enhance native Microsoft security protection. Abnormal Security is based in San Francisco, CA. More information is available at<a href="http://www.abnormalsecurity.com/">abnormalsecurity.com</a>.
Contact:  Diana Kozak MWW PR for Abnormal Security dkozak@mww.com

Symbol green 04w

Press Releases

Help net security logo

News

Martech logo

Abnormal was nominated for MISA membership based on how its platform uses Microsoft Azure Active Directory APIs to model and understand known good behavior, and thereby precisely detect and remediate socially-engineered, business email compromise (BEC) attacks, including account takeover.

Abnormal Joins Microsoft Intelligent Security Association

Abnormal Security announced it has joined the Microsoft Intelligent Security Association (MISA). Abnormal was nominated for membership based on how its platform uses Microsoft Azure Active Directory APIs to model and understand known good behavior, and thereby precisely detect and remediate socially-engineered, business email compromise (BEC) attacks, including account takeover.

Abnormal Security joins MISA to help customers combat global cybersecurity threats

Ai thority logo

Tech nadu logo

There are just too many accounts lying behind a single layer of authentication as it seems, and CISA is warning about the risk of the practice and why it should be considered a very inadequate and partial cybersecurity practice.

CISA Warns About the Perils of SFA as Brute-Force Attacks Reach New Levels

Abnormal Security, provider of a leading cloud-native email security platform that leverages behavioral data science to stop modern email attacks, released its Q3 2021 Email Threat Report.

Brute Force Email Attacks And Account Takeover Attempts Rise 671%, Reaching Unprecedented Levels, According To Abnormal Security Research

Homepage

Breadcrumbs

Abnormal Security provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Security

Over the course of the quarter, Abnormal researchers saw a significant increase in credential phishing, as well as brute force attacks, which are used to obtain personal information such as passwords, passphrases and usernames through a string of continuous, automated attempts. Once accessed, compromised accounts can be leveraged to send additional attacks on coworkers, partners and vendors, and provide the credentials necessary to infiltrate other parts of the organization.

Brute Force Email Attacks and Account Takeover Attempts Rise 671%, Reaching Unprecedented Levels, According to Abnormal Security Research

Over the course of the quarter, Abnormal researchers saw a significant increase in credential phishing, as well as brute force attacks, which are used to…

description

attacks, force, used, additional, coworkers, abnormal, researchers, significant, increase, credential, phishing, brute, obtain, personal, information

keywords

https://files.abnormalsecurity.com/production/images/press/symbol-green-04w.svg?dm=1632688491

Brute Force Email Attacks and Account Takeover Attempts Rise 671%,…

https://abnormalsecurity.com/about/news/brute-force-email-attacks-account-takeover-attempts-rise

referrer

robots

twitter:card

twitter:creator

twitter:description

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Brute Force Email Attacks and Account Takeover Attempts… | Abnormal"}}

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

Newsroom

Announcing Abnormal Innovate 2025 - The Leading AI + Cybersecurity Virtual Conference

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

Footer

FramerWrapper

Container

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

react-quill

B 1500x1500 MKT734 Open Graph Images for new Osterman Report

Analyst Research

Explore key insights from the latest Osterman Research report on how security leaders are strategically leveraging AI to strengthen defenses and outpace evolving threats.

Osterman Research: Using AI to Enhance Defensive Cybersecurity

Generative AI

B 11 08 24 Okta Datasheet

Data Sheets

Analyze human behavior to protect Okta identities.

Abnormal Security for Okta

B Taylor Made Customer Video

Customer Stories

Discover how Abnormal's holistic email protection lets TaylorMade's people trust their email and focus on the brand's core mission.

Human Behavior AI Ups TaylorMade's Email Security Game