R&D Release Notes - Week of December 9, 2024

We’ve strengthened detection capabilities across multiple threats, including Dropbox phishing messages, fake job offer scams, and Google Drive phishing attempts. These enhancements ensure improved identification and mitigation of evolving attack vectors, reinforcing our commitment to robust security solutions.

This week’s spotlight reveals a sophisticated BEC campaign targeting financial data through executive impersonation and PunyCode domains (e.g., hìghpressure[.]com). Attackers exploited authority, requesting sensitive payment details via emails that passed authentication checks and avoided malicious links or attachments.

Despite bypassing traditional SEGs, Abnormal's Human Behavioral AI detected anomalies in sender behavior, urgent financial requests, and content patterns, enabling swift identification and prevention.