Blog - Abnormal Security

Abnormal Attack Stories: Twitter Impersonation

In this attack, attackers are impersonating a Twitter security notification email, and the links contained in the email lead to a website used to phish user credentials.

July 2, 2020

Abnormal Security

Invoice & Payment Fraud BEC Attacks Are On The Rise

This is our first installment of a monthly series we’re launching to surface trends in email attacks. Our installment this month discusses trends we observed in May.

June 29, 2020

Erin Ludert

Abnormal Attack Stories: Social Media Attacks

Abnormal Security has observed attackers impersonating of social media platforms like Instagram, Facebook, and Twitter to steal the login credentials of employees major enterprise organizations. In the past two months, we have seen a 60% increase for several organizations with key social media presences. What are the attacks? These attacks impersonate popular social media platforms …

June 24, 2020

Abnormal Security

Protect Against the Unique Sophistication of Financially Motivated Social Engineering (FMSE) Attacks

Business email compromise (BEC) is a billion-dollar business for threat actors. According to the FBI’s Internet Crime Complaint Center (IC3), BEC scams have led to $26 billion in losses in the last three years. This year’s Verizon 2020 Data Breach Investigations Report (DBIR) report looked at the unique sophistication of Financially Motivated Social Engineering (FMSE) …

June 23, 2020

Ken Liao

Abnormal Attack Stories: LinkedIn Credential Phishing

In this attack, attackers impersonate an email from LinkedIn in order to steal login credentials.

June 22, 2020

Abnormal Security

Abnormal Attack Stories: Calendar Invite Phishing

In this attack, attackers are impersonating a company’s security team and are sending out phishing attacks contained within calendar application invites.

June 18, 2020

Abnormal Security

The State of Business Email Compromise Q1 2020: Attacks Shift From the C-Suite to Finance

Every day, we track and prevent email security threats for our users, which gives us enormous insight into where and how attackers attempt to infiltrate a business through email.

June 17, 2020

Ken Liao

What is Business Email Compromise?

According to the FBI’s Internet Crime Complaint Center (IC3) reports, Business Email Compromise (BEC) represents the single greatest cause of financial loss from cybercrime, accounting for more than 50% of all financial losses.

June 12, 2020

Ken Liao

Phishing Click Rates Decline While Socially-Engineered Attacks Grow

Cyber threats are constantly evolving. Cybersecurity teams are most effective when they deploy defenses that protect against the threats that pose the greatest risk at any given time. Socially-engineered attacks — one of the most financially-damaging threats according to the FBI — are on the rise and this year’s Verizon 2020 Data Breach Investigations Report …

June 11, 2020

Ken Liao

Abnormal Attack Stories: COVID-19 Relief Phishing Through Dropbox Transfer

In this attack, attackers impersonate the government efforts to provide relief funds to small business owners in order to steal personal information.

June 10, 2020

Abnormal Security

Abnormal Attack Stories: Secure Message Phishing

In this attack, attackers have compromised a company’s known vendor and sent out a phishing attack from that compromised account masquerading as a secure message for the recipient.

June 4, 2020

Abnormal Security

Abnormal Attack Stories: VPN Impersonation Phishing

In this attack, attackers are impersonating a notification from the user’s organization regarding VPN configuration. However, the email link hosts a phishing website aiming to steal credentials of employees.

June 3, 2020

Abnormal Security