Facing the Future: How Abnormal Customers Are Tackling AI-Driven Threats

It's no secret that emerging technologies are empowering cybercriminals to deploy increasingly sophisticated threats. The rise of artificial intelligence has already transformed the cybersecurity landscape, with 80% of security stakeholders reporting exposure to AI-generated email attacks since 2023.

From creating highly convincing phishing emails to orchestrating complex business email compromise (BEC) schemes, these attacks are evolving beyond the detection capabilities of legacy solutions. To illustrate this evolution, we’ve gathered insights from Abnormal’s customers who are dealing with the rising tide of AI-enhanced threats and why they’ve turned to an AI-driven security solution to keep their organizations safe.

“Attackers already use AI for greater impact, so you need solutions that improve as attacks evolve. Abnormal’s been ahead of the behavioral AI game, and as attacks become more refined, Abnormal will be there to help us.”
– Waldon Smith, CSIRT Manager, Valvoline

Valvoline’s security team has observed a rising trend of cybercriminals leveraging AI to enhance their attacks, particularly in sophisticated invoice fraud schemes, with attempted thefts ranging from $5,000 to millions. For Smith, staying ahead of these evolving threats requires a cutting-edge solution that can adapt just as quickly. Since deploying Abnormal's AI-powered detection and automation, Valvoline has saved $600k by stopping a recurring fraud attack, protected over 9,100 mailboxes, and reduced manual investigation time by 480 analyst hours per month.

“When Abnormal blocks a message or flags an attempted account compromise, sometimes our security folks get initial feedback that it’s a false positive or think it looks legitimate. When we dive in and give those instances a closer look, we see that Abnormal had the right call all along. That shows how difficult it is even for trained individuals to pick up those advanced threats. The greatest benefit to Abnormal is that anomaly detection through AI and machine learning.”
– Christopher Chambers, VP of Information Security, Comfort Systems USA

Chambers points out that even skilled professionals can find it difficult to spot advanced threats, particularly those powered by AI. Abnormal’s precise anomaly detection has revolutionized email security for Comfort Systems, safeguarding over 12,000 mailboxes. Within the first 90 days, Abnormal blocked 813 business email compromise (BEC) attacks and identified 249 high-risk vendor email accounts. By automating threat detection and response, Comfort Systems' security team now saves 62 hours each month previously spent on manual remediation.

“Increasingly, threat actors will use large language models to increase attack sophistication through things like customized real-time phishing emails based on something like a target’s LinkedIn profile. The only way to combat that social engineering is with a product like Abnormal that uses AI to understand email content and context.”
– Jeff Deakins, Director, Information Security and Infrastructure, Marmon Holdings, Inc.

To combat increasingly sophisticated phishing attacks, Deakins’ team relies on Abnormal’s AI-driven solution, which excels at detecting the subtle signals of socially engineered attacks. Abnormal safeguards Marmon's operations across 120+ security stacks, providing flawless protection with zero missed attacks or false positives within the first 30 days. By automating threat investigation, Abnormal also saves Marmon's security team 112 analyst hours monthly.

“Abnormal stopped a $50,000 BEC attack—the kind of thing that would have reached inboxes before with a SEG. Threat actors are adding AI and generative AI to make their techniques more convincing, so we needed the capability to respond to AI threats equally, and Abnormal delivers that.”
– Sherri Leach, Deputy CISO, Ingersoll Rand

Ingersoll Rand has experienced firsthand how AI has elevated the sophistication of BEC attacks, making them more convincing and harder to detect. With over 32,000 employee inboxes in need of protection, Ingersoll Rand turned to Abnormal for significant cost savings and security. With an AI-powered solution, Ingersoll saves $250K annually and has prevented $50K in losses from a single BEC attack. In just 30 days, Abnormal reduced graymail, saving 2,459 employee and VIP hours.

“Adversaries are changing from year to year and toolset to toolset, and we have to shift constantly as well. Our school of thought is if attackers now are using sophisticated techniques like AI, we should be using AI to combat them, and Abnormal delivers that for us.”
– Jeff McDonald, Senior Vice President of Technology Services, Vituity

By switching to an AI-powered solution, Vituity achieved zero missed attacks or false positives within 30 days of deployment, providing immediate confidence in their email security. Upon integration, Abnormal detected 61 high-risk vendor compromises that had previously gone unnoticed and saved over 200 hours of employee and executive time by drastically reducing graymail. In just 90 days, Abnormal's AI-driven automation not only enhanced Vituity's security posture but also empowered the team to focus on more strategic initiatives, driving both efficiency and peace of mind across the organization.

“The bad guys are innovating, so we have to be at the forefront of security to mitigate our risks and prevent these advanced attacks. Abnormal is the first platform that lives up to the promise of AI and ML for threat detection. And because Abnormal is API-based, when Microsoft pivots, Abnormal can pivot alongside it seamlessly and easily. This model is where the market is headed.”
– Jon Mendoza, CISO, Technologent

Mendoza has seen how quickly cybercriminals are innovating, often outpacing traditional security solutions. By staying ahead of the curve with AI and machine learning, Abnormal helps his team mitigate risks and protect against the latest, most sophisticated attacks. In just six months, Abnormal prevented over 4,200 advanced attacks for Technologent, while identifying 77 high-risk vendors since implementation.

As cyber threats become increasingly complex, Abnormal customers are stepping up their defenses. By integrating Abnormal's advanced solution into their security architecture, organizations are not merely reacting to emerging threats; they are strategically anticipating and neutralizing them before they can inflict damage. This proactive approach allows them to stay ahead of the curve, fortifying their defenses and ensuring that their business operations remain secure from even the most sophisticated cyberattacks.

Interested in learning more about how Abnormal can protect your business from sophisticated threats? Schedule a demo today!