DemoBlade

SAN FRANCISCO, August 14, 2024 - <a href="https://abnormalsecurity.com/?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=2024-CNBC-Disruptor-50"></a><a href="http://abnormalsecurity.com?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=series-d-funding"></a><a href="http://abnormalsecurity.com?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=h2-2024-threatreport">Abnormal Security</a>, the leader in AI-native human behavior security, today released its <a href="https://abnormalsecurity.com/resources/h2-2024-report-file-sharing-phishing-attacks?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=h2-2024-threatreport">H2 2024 Email Threat Report</a>, revealing the growing threat of file-sharing phishing attacks, whereby threat actors use popular file-hosting or e-signature solutions as a disguise to manipulate their targets into revealing private information or downloading malware. 
Sophisticated File-sharing Phishing Attacks on the Rise 
Examining data collected between June 2023 and June 2024, Abnormal saw file-sharing phishing volume more than triple, increasing 350% over the year. The majority of these attacks were sophisticated in nature, with 60% exploiting legitimate domains, most commonly webmail accounts, such as Gmail, iCloud, and Outlook; productivity and collaboration platforms; file storage and sharing platforms like Dropbox; and e-signature solutions like Docusign.
“The trust that people place in these kinds of services—especially those with recognizable brand names—makes them the perfect vehicle for launching phishing attacks,” said Mike Britton, chief information security officer at Abnormal Security. “Very few companies block URLs from these services because they aren’t inherently malicious. And by dispatching phishing emails directly from the services themselves, attackers hide in plain sight, making it harder for their targets to distinguish between legitimate and malicious communications. And when attackers layer in social engineering techniques, identifying these attacks becomes near-impossible.”
Finance and Built Environment Firms are Most Vulnerable 
The finance industry was found to be most at risk, with file sharing phishing attacks making up one in ten attacks. As financial institutions rely on file-sharing platforms to securely exchange documents, attackers have ample opportunities to slip in a fraudulent file-sharing notification among the sea of invoices, contracts, investment proposals, and regulatory updates. 
The second most vulnerable industry was construction and engineering, followed by real estate and property management companies. These sectors not only rely heavily on frequent document transfers via file-sharing platforms, but also involve time-sensitive projects with large payouts. By exploiting the urgency of these exchanges, attackers have an opportunity to send file-sharing phishing attacks that appear time-critical and blend in seamlessly with legitimate emails.
BEC and VEC Remain Persistent Threats
The biannual report also revealed the continued growth of business email compromise (BEC) and vendor email compromise (VEC) attacks: 
<ul><li dir="ltr">BEC attacks grew by more than 50% over the last year, with attacks on smaller organizations jumping nearly 60% in the last half. </li></ul><ul><li dir="ltr">41% of Abnormal customers were targeted by VEC each week in the first half of 2024, a slight increase over the 37% targeted in the second half of 2023. </li></ul><ul><li dir="ltr">Construction and engineering firms, as well as retailers and consumer goods manufacturers, were most vulnerable to VEC attacks, with 70% of organizations receiving at least one VEC attack in the first half of the year.</li></ul>
Britton continued, “Cybercriminals are continuing to use email to target human behavior, and through a variety of techniques—whether it’s leveraging social engineering tactics for BEC, or using the guise of legitimate applications in their phishing schemes. The report findings underscore this deliberate shift away from overt payloads and threat signatures, and toward email attacks designed to manipulate behavior. Keeping up with these threats will require organizations to adapt accordingly, recentering their defenses on protecting humans as their most vulnerable endpoints.”
Download the full H2 2024 Email Threat Report, “Bait and Switch: File-Sharing Phishing Attacks Surge 350% ”, <a href="https://abnormalsecurity.com/resources/h2-2024-report-file-sharing-phishing-attacks?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=h2-2024-threatreport">here</a>. 
About Abnormal Security
Abnormal Security is the leading AI-native human behavior security platform, leveraging machine learning to stop sophisticated inbound attacks and detect compromised accounts across email and connected applications. The anomaly detection engine leverages identity and context to understand human behavior and analyze the risk of every cloud email event—detecting and stopping sophisticated, socially-engineered attacks that target the human vulnerability.
You can deploy Abnormal in minutes with an API integration for Microsoft 365 or Google Workspace and experience the full value of the platform instantly. Additional protection is available for Slack, Workday, Salesforce, ServiceNow, Zoom, Amazon Web Services and multiple other cloud applications.
Media Contact
Jade Hill
Director of Communications
<a href="mailto:media@abnormalsecurity.com">media@abnormalsecurity.com</a> 

<a href="mailto:media@abnormalsecurity.com"></a>

Press Releases

News

Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA

Manchester council cyberattacks prompt supply chain risk warnings

Phishing via file-sharing services jumps 350%, warns Abnormal Security

Thousands targeted with phishing emails after cyber attack on Greater Manchester councils

Homepage

Breadcrumbs

Abnormal Security provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Security

New report reveals the growing threat of file-sharing phishing attacks, while BEC attacks continue to scale 50% over the last year

Abnormal Security Announces H2 2024 Email Threat Report,

description

attacks, phishing, continuing, traditional, increasingly, exploit, file, sharing, services, advance, scale, year, actors, threat

keywords

https://images.abnormalsecurity.com/production/images/press/L_1200x627_MKT621b-Open-graph-for-H2-2024-Threat-Report.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1723575522&s=cb39cb893a8152adab6bb7973b3efe01

https://abnormalsecurity.com/about/news/h2-2024-threat-report

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/press/L_1200x627_MKT621b-Open-graph-for-H2-2024-Threat-Report.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1723575522&s=583e870f6a6ac5f538543fc175c119d3

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Abnormal Security Announces H2 2024 Email Threat Report, | Abnormal"}}

Threat actors increasingly exploit file sharing services to advance phishing attacks, while continuing to scale traditional BEC attacks by 50% over the last year

File-Sharing Phishing Attacks Surge 350%, According to New Research from Abnormal Security

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

Newsroom

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

Footer

FramerWrapper

Container

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

react-quill

B 1500x1500 MKT734 Open Graph Images for new Osterman Report

Analyst Research

Explore key insights from the latest Osterman Research report on how security leaders are strategically leveraging AI to strengthen defenses and outpace evolving threats.

Osterman Research: Using AI to Enhance Defensive Cybersecurity

Generative AI

B 11 08 24 Okta Datasheet

Data Sheets

Analyze human behavior to protect Okta identities.

Abnormal Security for Okta

B Taylor Made Customer Video

Customer Stories

Discover how Abnormal's holistic email protection lets TaylorMade's people trust their email and focus on the brand's core mission.

Human Behavior AI Ups TaylorMade's Email Security Game