DemoBlade

SAN FRANCISCO, June 22, 2022 - <a href="https://abnormalsecurity.com/?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=funding-announcement">Abnormal Security</a>, the leading AI-based cloud-native email security platform, announced today the release of new research that showcases a rising trend in financial supply chain compromise as threat actors impersonate vendors more than ever before. In January 2022, the number of business email compromise (BEC) attacks impersonating external third parties surpassed those impersonating internal employees for the first time and has continued to exceed traditional internal impersonations in each month since. In May 2022, external, third-party impersonation made up 52% of all BEC attacks seen by Abnormal, while internal impersonation fell to 48% of all attacks. Just one year prior, internal impersonation accounted for 60% of all attacks—marking a 30% year over year increase in third-party impersonation. 
Financial supply chain compromise is a subset of business email compromise in which cybercriminals take advantage of known or unknown third-party relationships to launch sophisticated attacks. The goal is to use the legitimacy of the vendor name to trick an unsuspecting employee into paying a fraudulent invoice, changing billing account details, or providing insight into other customers to target. These tactics are increasingly dangerous, with one attack stopped by Abnormal requesting $2.1 million for a fake invoice. 
Throughout the report, Abnormal dives into four known types of financial supply chain compromise—vendor email compromise, aging report theft, third-party reconnaissance, and blind third-party impersonation—each with varying degrees of sophistication. Whereas a vendor email compromise attack requires the threat actor to understand business relationships and financial transaction schedules, a blind third-party attack simply leverages traditional social engineering tactics to request payments using pretexts like impending legal actions. While all four types of attacks have seen success, those that use legitimate compromised accounts are extremely difficult to detect and can be disastrous to the companies they target.
“While financial supply chain compromise is not new, the increase in using third-party impersonation tactics is worrisome,” states Crane Hassold, director of threat intelligence at Abnormal Security. “Our threat intelligence team has discovered increasingly sophisticated attacks that are nearly impossible for legacy systems or end users to detect, particularly because they come from real vendor accounts, hijack ongoing conversations, and reference legitimate transactions.”
According to the FBI, business email compromise has exposed organizations to $43 billion in losses over the past six years, and real losses continue to grow year over year, making up 35% of all losses to cybercrime in 2021 alone. This new trend is just one example of the increasing sophistication of these modern email threats, and how cybercriminals continue to evolve and optimize their strategies for success. As employees become more aware of traditional BEC attacks that rely on executive impersonation, threat actors have successfully started to impersonate other entities—often with larger degrees of success.
Said Hassold, “This shift to financial supply chain attacks is another important milestone in the evolution of threat actors from low-value, low-impact threats like spam to targeted high-value, high-impact attacks. And because they are successful, we expect that this external impersonation will continue to rise as a percentage of all attacks, ultimately dominating the BEC landscape for the foreseeable future.”
So why does this shift in attacker behavior matter? For one, it means the ultimate victims of financial supply chain attacks are not in control of the initial compromise, which makes it more important than ever for companies to maintain a robust understanding of their supply chain. To solve this problem, Abnormal Security uses unique AI ​​to precisely baseline good behavior across internal and external identities and communications. The proprietary VendorBase technology identifies all vendors in a customer’s ecosystem to understand individual risk level, using a federated database across all Abnormal customers. By recognizing when a vendor may have a high risk of fraud, Abnormal knows when an email should be more heavily scrutinized for malicious activity, effectively preventing all forms of financial supply chain compromise. 
To learn more about financial supply chain compromise and download the full report, please visit <a href="https://abnormalsecurity.com/resources/financial-supply-chain-compromise" target="_blank" rel="noreferrer noopener">https://abnormalsecurity.com/resources/financial-supply-chain-compromise</a> 
For more information on Abnormal Security, please visit <a href="https://abnormalsecurity.com/?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=funding-announcement">https://abnormalsecurity.com/</a>. 
About Abnormal Security
Abnormal Security provides a leading cloud-native email security platform that leverages AI-based behavioral data science to stop socially-engineered and never-seen-before email attacks that evade traditional secure email gateways (SEGs). Abnormal delivers a fundamentally different approach that precisely detects and protects against the widest range of attacks including business email compromise, phishing, malware, ransomware, social engineering, spam and graymail, supply chain compromise, and internal account compromise. The Abnormal platform delivers inbound email security, internal and external account takeover protection, and full SOC automation. Abnormal’s API-based approach enables customers to get started in minutes and can augment a SEG or be used standalone to enhance native cloud email security protection with Microsoft 365 and Google Workspace. Abnormal Security is based in San Francisco, CA. More information is available at <a href="https://abnormalsecurity.com/?utm_source=businesswire&amp;utm_medium=PR&amp;utm_content=funding-announcement">abnormalsecurity.com</a>.
Media Contact:
MikeWorldWide (MWW) for Abnormal Security Diana Kozak <a href="mailto:Abnormalsecurity@mww.com">abnormalsecurity@mww.com</a>

Floor dark green 1 FINAL

Press fscc report

Press Releases

Crn uk logo

News

Cpo magazine logo

The number of phishing attacks reached a record high in the first quarter of 2022, with the three-month total crossing the one million mark.

Phishing Attacks Reached a Record High in the First Quarter of 2022, APWG Report Found

Ignition Technology, the specialist arm of Exclusive Networks, has penned a distribution agreement with email security start-up Abnormal Security.

Ignition Technology signs EMEA deal with start-up Abnormal Security

Venturebeat logo

Channellife australia logo

New research by Abnormal Security has found a rising trend in financial supply chain compromise as threat actors increasingly impersonate vendors. The AI-based cloud-native email security platform’s research notes that in January, the number of business email compromise (BEC) attacks impersonating external third parties surpassed those impersonating internal employees for the first time and has continued to exceed traditional internal impersonations throughout the year.

Abnormal Security finds financial supply chain under threat

Technology venture capital deals may be slowing down, but investment in artificial intelligence (AI) companies continues to boom. Investments in AI research and applications are set to hit $500 billion by 2024, according to research firm IDC, while PwC predicts AI will contribute $15.7 trillion to the global economy by 2030.

10 new AI unicorns flying high in 2022

Homepage

Breadcrumbs

Abnormal Security provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Security

The latest research showcases how threat actors increasingly use third-party vendor impersonation as part of financial supply chain compromise scams.

New Trend in BEC Emerges as Vendor Impersonation Overtakes CEO Fraud

description

email, cloud-native, security, cloud, platforms, types, attacks, business, compromise, platform, uses, behavioral, analyze, identity, content

keywords

https://images.abnormalsecurity.com/production/images/press/press-fscc-report-linkedin.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1655862378&s=f7d4c475beac3d1a29022e3e2f9643b0

https://abnormalsecurity.com/about/news/shift-financial-supply-chain-compromise

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/press/press-fscc-report-twitter.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1655862382&s=124527c674cf998488c0b6ab11715fbe

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"New Trend in BEC Emerges as Vendor Impersonation Overtakes… | Abnormal"}}

Abnormal is recognized for its cloud-native email security platform that uses behavioral AI to analyze identity, content and context and leverages 45,000+ signals from cloud email platforms to stop all types of email attacks including business email compromise, supply chain fraud, ransomware, phishing, spam and graymail.

New Trend in Business Email Compromise Emerges as Vendor Impersonation Overtakes CEO Fraud

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

Newsroom

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

Footer

FramerWrapper

Container

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

react-quill

B 1500x1500 MKT734 Open Graph Images for new Osterman Report

Analyst Research

Explore key insights from the latest Osterman Research report on how security leaders are strategically leveraging AI to strengthen defenses and outpace evolving threats.

Osterman Research: Using AI to Enhance Defensive Cybersecurity

Generative AI

B 11 08 24 Okta Datasheet

Data Sheets

Analyze human behavior to protect Okta identities.

Abnormal Security for Okta

B Taylor Made Customer Video

Customer Stories

Discover how Abnormal's holistic email protection lets TaylorMade's people trust their email and focus on the brand's core mission.

Human Behavior AI Ups TaylorMade's Email Security Game