What’s New: Week of Dec 21-25 2020 – Improved Customer Report Portal and Inbound Attack Detection

Customer Report Portal Improvements – Abnormal now sends automated email notifications when resolving a potential missed attack reported by the customer. 

Additionally, the Customer Report Portal now supports false positive analysis in addition to missed attack analysis. Every message manually moved back to the user’s inbox will receive an in depth analysis. This analysis will lead to detection improvements to prevent similar future misjudgments. 

Customers benefit from increased visibility for false positive and missed attacks, as well as increased automation for receiving Abnormal alerts.

Inbound Attack Detection Improvements – Abnormal made the following inbound attack detection improvements: 

• Weighted ensemble model: Focused our models to ensure we catch more advanced phishing and BEC attacks as compared to spam 
• Credential phishing attacks via attachments: We now use signals within attachments to detect credential phishing attacks
• Link-parsing: Improved parsing of obfuscated links used by attackers