DemoBlade

SAN FRANCISCO — February 17, 2021 — <a href="https://abnormalsecurity.com/">Abnormal Security</a>, a next-generation cloud email security company, today released a new threat research report that reveals an 82% increase in the chance of companies getting attacked through SolarWinds-style vendor email compromise (VEC) during any given week. The company also found that these attacks can be very costly as it recently detected and stopped a $1.6M VEC attack.
Based on an analysis of cyber-attacks on Fortune 1000 companies stopped by Abnormal Security from Q3 2020 to January 2021, the report, <a href="https://info.abnormalsecurity.com/GBL-WFC-Q4QuarterlyBECReport.html?utm_source=press&amp;utm_medium=link&amp;utm_campaign=vec-report-q1-2021">The Rising Threat of Vendor Email Compromise in a Post-SolarWinds Era</a>, is the industry’s first benchmark of the risk and cost of vendor email compromise attacks. The report revealed that the average potential cost is 144% higher than losses from business email compromise (BEC) reported to the FBI’s Internet Complaint Crime Center (IC3).
“Throughout 2020, threat actors have increased attacks on enterprises using novel and sophisticated social engineering techniques to infiltrate trusted supply chain communications,” said Evan Reiser, CEO and co-founder of Abnormal Security. “To stop these attacks, large enterprises need the right technical controls to identify vendors that have been compromised. This is possible with a real-time risk assessment of vendors and customers communicating with your organization to stop supply chain fraud, which Abnormal uniquely delivers through VendorBase. With this, enterprises can protect themselves against the next SolarWinds vendor email compromise attack.”
The report released today is the latest in a quarterly research series on the state of vendor email compromise, which has focused on supply chain attacks. Through this research, Abnormal has observed a continuous increase in VEC attacks with the goal of stealing large sums of money from enterprises through invoice and payment fraud. 
Key findings in today’s report illustrate the probability that enterprises will be targeted through vendor email compromise and the potential costs:<ul><li>On a quarterly basis, companies had a 50% chance of getting hit with a VEC attack at least once in Q4 2020 vs. 40% in Q3;</li><li>Companies had a 23% chance of being targeted by a VEC attack during any given week in January 2021 vs. 13% in Q3;</li><li>The average potential cost of VEC attacks detected and stopped by Abnormal Security is $183,000 per attack;</li><li>Billing account update fraud is the costliest form of VEC attack – close to $300,000 on average per attack;</li><li>Threat actors continued to follow the money in Q4, as weekly VEC campaigns with the goal of invoice and payment fraud increased 45% from Q3 to Q4</li><li>Seven out of eight major industries tracked by Abnormal Security experienced a quarter-over-quarter increase in VEC attacks in Q4. These included Energy/Infrastructure, Finance, Hospitality, Media/TV, Retail/Consumer Goods &amp; and Manufacturing, Services, and Technology.</li></ul>
Supply chain communications are trusted and typically convey a sense of urgency, making it easy for these types of attacks to blend in with legitimate and valid emails. Since the attacks come from trusted yet impersonated or compromised vendor accounts, organizations often cannot detect when an attack is underway until it is too late. 
These attacks highlight the importance of solutions to ensure supply chain security like <a href="https://abnormalsecurity.com/vendorbase/">VendorBase</a>, Abnormal’s global, federated database of vendor and customer behaviors to stop supply chain compromise. VendorBase continuously monitors communications between vendors and customers and provides a real-time, stateful risk assessment enabling the Abnormal AI-based threat detection engine to stop these targeted and sophisticated supply chain attacks that slip past secure email gateways.
To download the full Abnormal Security report, The Rising Threat of Vendor Email Compromise in a Post-SolarWinds Era, please visit <a href="https://info.abnormalsecurity.com/GBL-WFC-Q4QuarterlyBECReport.html?utm_source=press&amp;utm_medium=link&amp;utm_campaign=vec-report-q1-2021">here</a>. To request a demo of VendorBase, please visit <a href="https://abnormalsecurity.com/request-demo/">https://abnormalsecurity.com/request-demo/</a>. <h4>About Abnormal Security</h4>
Abnormal Security is a next-generation cloud email security company that protects enterprises from targeted email attacks, account compromise and supply chain compromise. Unlike legacy email security solutions, the Abnormal Security platform uses an innovative AI-based approach that deeply understands the people, relationships and business processes to stop the most sophisticated cyber-attacks. Abnormal Security is based in San Francisco, CA. More information is available at <a href="https://www.abnormalsecurity.com/?utm_source=press&amp;utm_medium=link&amp;utm_campaign=2020-funding-announcement">abnormalsecurity.com</a>. <h4>Contact:</h4>
Ted Weismann fama PR for Abnormal Security Abnormal@famapr.com (617) 396-7740

Symbol gray 01b

Press Releases

Enterprise security tech logo

News

Beta news logo

The supply chain attack involving SolarWinds software last year has caused ripples throughout the cybersecurity industry, not least because it went undetected for nine months. The attack was able to bypass traditional email security by exploiting trusted communications routes between vendors and customers. A worrying new report from Abnormal Security shows that this technique is becoming a mainstream attack vector.

SolarWinds-style email compromise attacks go mainstream

Abnormal Security, a next-generation cloud email security company, today released a new threat research report that reveals an 82% increase in the chance of companies getting attacked through SolarWinds-style vendor email compromise (VEC) during any given week. The company also found that these attacks can be very costly as it recently detected and stopped a $1.6M VEC attack.

Abnormal Security: Risk of SolarWinds-Style Attacks Through Vendor Email Compromise Increased 82%

Pymnts logo

Gov info security logo

A Microsoft-themed phishing campaign is using phony Google reCAPTCHA in an attempt to steal credentials from senior employees of various organizations, a new report by security firm Zscaler says. The company says it prevented more than 2,500 phishing emails tied to the campaign.

Phishing Attack Uses Fake Google reCAPTCHA

While the threat of cyberattacks continues to impact organizations directly, businesses of all sizes are also facing threats from their own supply chains. The latest data suggests that the business email compromise (BEC) scam continues to plague firms and their banking partners, with cybercriminals going after business partners and suppliers, and expanding their target base from there. PYMNTS rounds up the latest stats from this threat, plus more stories in the world of B2B fraud, below.

Business Email Compromise Attacks Raise Corporate, Bank Alarms

Homepage

Breadcrumbs

Abnormal Security provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Security

Abnormal Security, a next-generation cloud email security company, today released a new threat research report that reveals an 82% increase in the chance of companies getting attacked through SolarWinds-style vendor email compromise (VEC) during any given week

Risk of SolarWinds-Style Attacks Through Vendor Email Compromise Increased 82%, Abnormal Threat Research Report Reveals

Abnormal Security, a next-generation cloud email security company, today released a new threat research report that reveals an 82% increase in the chance…

description

email, security, next-generation, cloud, company, vendor, compromise, abnormal, today, released, threat, research, report, reveals, increase

keywords

https://files.abnormalsecurity.com/production/images/press/symbol-gray-01b.svg?dm=1632688470

Risk of SolarWinds-Style Attacks Through Vendor Email Compromise…

https://abnormalsecurity.com/about/news/risk-solarwinds-style-attacks-vendor-email-compromise-increased

referrer

robots

twitter:card

twitter:creator

twitter:description

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Risk of SolarWinds-Style Attacks Through Vendor Email… | Abnormal"}}

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

Newsroom

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

Footer

FramerWrapper

Container

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

react-quill

B 1500x1500 MKT734 Open Graph Images for new Osterman Report

Analyst Research

Explore key insights from the latest Osterman Research report on how security leaders are strategically leveraging AI to strengthen defenses and outpace evolving threats.

Osterman Research: Using AI to Enhance Defensive Cybersecurity

Generative AI

B 11 08 24 Okta Datasheet

Data Sheets

Analyze human behavior to protect Okta identities.

Abnormal Security for Okta

B Taylor Made Customer Video

Customer Stories

Discover how Abnormal's holistic email protection lets TaylorMade's people trust their email and focus on the brand's core mission.

Human Behavior AI Ups TaylorMade's Email Security Game