DemoBlade

Bleeping computer logo

News

Threat post logo

Data breach today logo

Hackers waging a phishing campaign stole more than 1,000 corporate email credentials and then stored the stolen data in a database accessible via a simple Google search, Check Point Research says.

Hackers Leave Stolen Email Credentials Exposed

Two new phishing tactics use the platform’s automated responses to evade email filters. Two fresh business email compromise (BEC) tactics have emerged onto the phishing scene, involving the manipulation of Microsoft 365 automated email responses in order to evade email security filters.

Microsoft 365 Becomes Haven for BEC Innovation

Cybersecurity dive logo

Beta news logo

The supply chain attack involving SolarWinds software last year has caused ripples throughout the cybersecurity industry, not least because it went undetected for nine months. The attack was able to bypass traditional email security by exploiting trusted communications routes between vendors and customers. A worrying new report from Abnormal Security shows that this technique is becoming a mainstream attack vector.

SolarWinds-style email compromise attacks go mainstream

While SolarWinds has garnered much of the attention following disclosure of a sophisticated nation-state attack, companies are asking about the role of Microsoft Office 365 in the compromise. Larger questions persist about the overall security of one of the world's largest email and productivity applications.

SolarWinds fallout turns security eye to Microsoft Office 365

Homepage

Breadcrumbs

Abnormal Security provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Security

Threat actors are sending phishing emails impersonating a Small Business Administration (SBA) lender to prey on US business owners who want to apply for a Paycheck Protection Program (PPP) loan to keep their business going during the COVID-19 crisis. PPP allows businesses to apply for an SBA loan designed to help them keep their workforce employed throughout the current pandemic.

Phishing campaign lures US businesses with fake PPP loans

Threat actors are sending phishing emails impersonating a Small Business Administration (SBA) lender to prey on US business owners who want to apply for a…

description

business, loan, apply, small, administration, prey, owners, going, want, paycheck, program, designed, businesses, sending, phishing

keywords

https://optimise2.assets-servd.host/gifted-zorilla/production/images/press/bleeping-computer-logo.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1632180661&s=c2e133d05d0a01f8d70148c954914411

https://abnormalsecurity.com/about/news/phishing-campaign-lures-us-businesses-with-fake-ppp-loans

referrer

robots

twitter:card

twitter:creator

twitter:description

https://optimise2.assets-servd.host/gifted-zorilla/production/images/press/bleeping-computer-logo.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1632180661&s=883b6e195383bd71042392856057ceca

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Phishing campaign lures US businesses with fake PPP loans | Abnormal"}}

Schedule a Demo

Preventing Criminals From Using AI for Cybersecurity Attacks

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

<p>Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.</p>

Newsroom

Announcing a New Abnormal Podcast! | Listen to SOC Unlocked Podcast

<p>Announcing a New Abnormal Podcast!</p>

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

Footer

FramerWrapper

Container

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

react-quill

B MKT515p New AI Human Behavior Platform Whitepaper

White Papers

Discover how Abnormal's AI-powered solution protects organizations from their biggest risk—humans.

How to Protect Against the Human Vulnerability: Using AI to Prevent Novel Socially-Engineered Attacks

Abnormal Platform

B SOC Unlocked Mick Douglas

Podcasts

Unnamed

Mick Douglas

MICK HEADSHOT

Mick Leach

Tune in as host and SOC expert Mick Leach chats with Mick Douglas,  Managing Partner of InfoSec Innovations about a range of topics including the current state of security operations, the role of automation and AI in the field, and the importance of using security tools effectively.

Automation, AI, and Bridging the Cybersecurity Talent Gap with Mick Douglas

B SANS Report

Analyst Research

Learn how modern SOC teams address evolving threats, challenges, and technology integrations.

SANS 2024 SOC Survey: Facing Top Challenges in Security Operations

B Attack Quiz

Tools

Test your ability to distinguish malicious emails from safe ones in this interactive quiz.

Quiz: Attack or Not?

Phishing campaign lures US businesses with fake PPP loans

Get AI Protection for Your Human Interactions