The Abnormal Anomalies

Disguising his emails as legitimate communication from a known organization or individual, Reeler sends fraudulent messages to trick employees into revealing sensitive information like account logins. Reeler’s phishing messages account for 73% of all advanced email attacks.

Learn More About Credential Phishing →

Greta’s modus operandi is impersonating executives and other internal employees. Using social engineering tactics, she encourages recipients to provide valuable data and update payroll account details. Greta’s BEC attacks accounted for nearly $3 billion in losses last year alone. (Source: FBI IC3)

Learn More About Business Email Compromise →

Opting to impersonate vendors rather than internal employees, Frauderick convinces targets to pay fake invoices, send fraudulent wire transfers, or update banking account details. The largest vendor fraud attack stopped by Abnormal to date involved a request for $36 million.

Learn More About Vendor Email Compromise →

Malcolm’s attacks exploit trusted digital entities and use emails that reference relevant topics to urge recipients to click on malicious links or download malicious attachments. A growing threat, the total losses from his attacks increased by 74% year-over-year. (Source: FBI IC3)

Learn More About Malware + Ransomware →

Bobby compromises legitimate email accounts to exfiltrate sensitive data, access connected apps, or use the account to send additional attacks. His campaigns are among the most damaging, with the average cost of a data breach caused by compromised credentials totaling $4.62 million. (Source: IBM)

Learn More About Account Takeover →

A relative newcomer to the Anomalies, GenAimee has already established her attacks as some of the most sophisticated. GenAimee’s threats are a significant challenge for security leaders—98% of whom report security risks from generative AI are a major concern.

Learn More About Generative AI Attacks →

Olivia Obscura burst onto the scene in 2020, capitalizing on the sudden ubiquity of QR codes. Masquerading as trusted brands, Olivia compels targets to scan malicious QR codes connected to phishing pages. Her campaigns contributed to the nearly 300,000 phishing incidents reported in 2023. (Source: FBI IC3)

Learn More About QR Code Attacks →

Rather than target the inbox directly, Victor takes advantage of vulnerabilities created by integrations with third-party applications. He exploits third-party apps connected to the email environment to gain access and steal information, costing organizations an average of $4.55 million per incident. (Source: IBM)

Learn More About Third-Party App Attacks →