Bleeping computer logo

News

Threat post logo

Data breach today logo

Hackers waging a phishing campaign stole more than 1,000 corporate email credentials and then stored the stolen data in a database accessible via a simple Google search, Check Point Research says.

Hackers Leave Stolen Email Credentials Exposed

Two new phishing tactics use the platform’s automated responses to evade email filters. Two fresh business email compromise (BEC) tactics have emerged onto the phishing scene, involving the manipulation of Microsoft 365 automated email responses in order to evade email security filters.

Microsoft 365 Becomes Haven for BEC Innovation

Cybersecurity dive logo

Beta news logo

The supply chain attack involving SolarWinds software last year has caused ripples throughout the cybersecurity industry, not least because it went undetected for nine months. The attack was able to bypass traditional email security by exploiting trusted communications routes between vendors and customers. A worrying new report from Abnormal Security shows that this technique is becoming a mainstream attack vector.

SolarWinds-style email compromise attacks go mainstream

While SolarWinds has garnered much of the attention following disclosure of a sophisticated nation-state attack, companies are asking about the role of Microsoft Office 365 in the compromise. Larger questions persist about the overall security of one of the world's largest email and productivity applications.

SolarWinds fallout turns security eye to Microsoft Office 365

Homepage

Breadcrumbs

Abnormal Security provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Security

Threat actors are sending phishing emails impersonating a Small Business Administration (SBA) lender to prey on US business owners who want to apply for a Paycheck Protection Program (PPP) loan to keep their business going during the COVID-19 crisis. PPP allows businesses to apply for an SBA loan designed to help them keep their workforce employed throughout the current pandemic.

Phishing campaign lures US businesses with fake PPP loans

Threat actors are sending phishing emails impersonating a Small Business Administration (SBA) lender to prey on US business owners who want to apply for a…

description

business, loan, apply, small, administration, prey, owners, going, want, paycheck, program, designed, businesses, sending, phishing

keywords

Threat actors are sending phishing emails impersonating a Small Business Administration (SBA) lender to prey on US business owners who want to apply for a Paycheck Protection Program (PPP) loan to keep their business going during the COVID-19 crisis. PPP allows businesses to apply for an SBA loan…

https://optimise2.assets-servd.host/gifted-zorilla/production/images/press/bleeping-computer-logo.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1632180661&s=c2e133d05d0a01f8d70148c954914411

https://abnormalsecurity.com/about/news/phishing-campaign-lures-us-businesses-with-fake-ppp-loans

referrer

robots

twitter:card

twitter:creator

twitter:description

https://optimise2.assets-servd.host/gifted-zorilla/production/images/press/bleeping-computer-logo.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1632180661&s=883b6e195383bd71042392856057ceca

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Phishing campaign lures US businesses with fake PPP loans | Abnormal"}}

Recent history shows holiday weekends and vacations provide an attack surface bonanza for threat actors.

Ahead of summer holiday weekends, IT security leaders brace for deliberate cyber mischief

Sc media logo

Even though nearly three-quarters of business email compromise attacks during the past year have emerged from Nigeria, Israel has been gaining traction as a base for sophisticated BEC campaigns.

Israel-based BEC attacks on the rise

Tech republic logo

Abnormal Security is tracking cybercriminals from an unusual location for business email compromises who are using sophisticated spoofing to spur payments for fake acquisitions.

Israel-based threat actors show growing sophistication of email attacks

Cso logo

The group, identified by Abnormal Security, targets multinational firms using email display name spoofing and multiple fake personas.

Israeli threat group uses fake company acquisitions in CEO fraud schemes

It security wire logo

The cybercrime industry is evolving tremendously, and CISOs need to have stringent practices to keep their IT infrastructure secure against sophisticated cyber threats and risks. IT Security Wire interviewed Mike Britton, CISO, Abnormal Security, to understand today’s threats and the best ways to stay secure.

Modern Cyber Threat Landscape and Ways to Stay Secure

Mssp alert logo

A BEC campaign has been tracked to a threat group in Israel, an unlikely genesis for a cyberattack of any kind, Abnormal Security said in a new report.

Widespread Email Ruse Launched from Israel, an Unlikely Source in Moneygrab

Dark reading logo

Researchers at Abnormal Security discovered an Israel-based threat group carrying out a BEC campaign primarily targeting large and multinational enterprises with an average annual revenue of over $10 billion.

BEC Campaign via Israel Spotted Targeting Large Multinational Companies

Symbol beige 01b

Press Releases

The report reveals how an emerging threat group employs a multi-phased BEC attack with an M&A theme to steal  from multinational enterprises

New Research from Abnormal Security Shows the Rise of Business Email Compromise Attacks Sent from Israel

Symbol green 01w

More than two thirds of IT and security leaders are concerned that attackers are leveraging communication and collaboration channels beyond email to evade security controls

New Survey from ESG Reveals Trends Shaping Communication and Collaboration Application Security

Help net security logo

Here’s a look at the most interesting products from the past month, featuring releases from Abnormal Security and others.

Infosec products of the month: April 2023

Crn australia logo

Abnormal Security unveiled three new products during RSA Conference, adding new threat detection capabilities for Microsoft Teams, Slack and Zoom.

Ten coolest cybersecurity startups at RSA 2023

It pro today logo

The 2023 RSA Conference showcased a variety of AI-powered cybersecurity tools, with dozens of vendors highlighting the intersection of AI and cybersecurity.

AI Takes Center Stage at 2023 RSA Conference: A Roundup of New Products

Schedule a Demo

Email Subscribe

<p>Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.</p>

News & Press

<p>Exploring the Rise of Israel-Based BEC Attacks </p>

chakra-ui-ChakraProvider

Footer

Screen

react-awesome-reveal

lottie-react

plasmic-embed-css

plasmic-query

plasmic-basic-components

Abnormal Design System

react-slick

Abnormal Solutions

react-scroll-parallax-global

Abnormal Pages

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

Abnormal Marketing

Abnormal Partners

Abnormal Products

antd5 hostless

B 04 20 23 Gartner report

Analyst Research

Abnormal’s fundamentally different approach to cloud email security provides the best protection against existing and emerging attack techniques.

2023 Gartner® Market Guide for Email Security

Email Security

B 02 15 23 ROI Calculator

Tools

Discover the ROI you can experience with Abnormal Security.

ROI Calculator: Discover Your Abnormal Return on Investment

Abnormal Platform

B 02 08 23 1500x1500 H12023 Threat Report

Threat Reports

Abnormal’s latest report on business email compromise trends and statistics finds that employees open 28% of attacks and reply to 15% of them.

H1 2023: “Read” Alert: Data Shows 28% of BEC Attacks Opened by Employees

B 04 20 23 Forrester Total Economic Impact Study of Abnormal Security

Learn how investing in Abnormal Security can yield a 278% ROI within 3 years and help your organization avoid $4 million in losses from BEC.

404

This page could not be found.