Schedule a Demo - AI

Supply Chain Compromise

ABN Abnormal Security New Photo 1

Crane Profile Image

Crane Hassold

Executives are no longer the go-to impersonated party in business email compromise (BEC) attacks. Now, threat actors are opting to impersonate vendors instead.

New Abnormal Research Shows Rise in Financial Supply Chain Compromise as Attackers Turn to Vendor Impersonation

Business Email Compromise

ABN Abnormal Security New Photo 10

It’s IC3 Report week! In what has become an annual holiday for anyone that’s heavily involved in researching business email compromise (BEC) attacks, the FBI released its 2021 Internet Crime Report that details trends in various types of cybercrime activity over the past year.

Unlucky #7: FBI Data Shows BEC Is the Top Cyber Threat for Seventh Year in a Row

ABN Abnormal Security New Photo 11

Author jade hill

Jade Hill

Today, Abnormal released our H1 2022 Email Threat Report, focused on data from July to December 2021. Over the course of those six months, we tracked a relatively new form of cyber attack—phone fraud that starts via email.

New Research Shows Phone Fraud Targets 89% of Companies

Abnormal Intelligence Email Subscribe

<p>Subscribe to our monthly newsletter to receive the latest insights from our team directly in your inbox.</p>

Abnormal Blog

Top Bar

<p>New BEC Insights from Chris Krebs, Former Director of CISA</p>

B 08 01 23 MKT324 H2 2023 Email Threat Report Ai

Threat Reports

The latest threat report shows that 37.5% of all applications request high-risk permissions—putting your email environment in danger.

H2 2023 - Applications Abound:  Average Organization Now Integrates 379 Third-Party Applications with Email

Email Security

Generative AI Enables Threat Actors to Create More (and More Sophisticated) Email Attacks

B 05 08 23 MKT006 Rise of Israel Based BEC Attacks AI 1

A recent study uncovered the emergence of an Israel-based threat group with no direct ties to Nigeria that launches sophisticated, multistage BEC attacks targeting global enterprises.

Exploring the Rise of Israel-Based BEC Attacks

Stopping Vendor Email Compromise in Action: Threat Actors Request Invoice for $36 Million

Homepage

Abnormal Intelligence Research

Breadcrumbs

Discover the latest email security insights and access white papers, solution briefs, case studies, webinars, and more in the Abnormal Resource Center.

Threat Intelligence Research | Abnormal

description

https://optimise2.assets-servd.host/gifted-zorilla/production/images/og-images/ABN-Reasearch-Open-Graph-Image_L3R1.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1659922852&s=31a2b97e4118a530b93ebc82f64f639d

https://intelligence.abnormalsecurity.com/resources

referrer

robots

twitter:card

twitter:creator

twitter:description

twitter:image

twitter:image:height

twitter:image:width

twitter:title

{"title":{"title":"Threat Intelligence Research | Abnormal"}}

Uncover the latest information on attacker strategies and trends across the email threat landscape.

Webinars

Ransomware

ABN Abnormal Security New Photo 3

Here’s an in-depth analysis of the 62 most prominent ransomware groups and their activities since January 2020.

A Deep Dive into Active Ransomware Groups

ABN Abnormal Security New Photo 5

Like all threats in the cyber threat landscape, ransomware will continue to evolve over time. This post builds on our prior research and looks at the changes we observed in the ransomware threat landscape in the first quarter of 2022.

Ransomware Volume Drops as a Main Player Exits the Stage

ABN Abnormal Security New Photo 9

Belem regalado author

Belem Regalado

Author rachelle chouinard

Rachelle Chouinard

Threat actors are posing as businesses and individuals seeking tax preparation services and then providing copies of the Sorillus client remote access tool (RAT).

Tax Return Customer Campaign Attempts to Infect Victims with Sorillus RAT

ABN Abnormal Security New Photo 12

Actors are now exploiting the customer contact form on websites to bypass email security and encourage BazarLoader downloads.

BazarLoader Actors Initiate Contact via Website Contact Forms

ABN Abnormal Security New Photo 13

Looking at the overall volume trends, there have been two main spikes in ransomware activity over the last two years.

The Victimology of Ransomware: 4,200 Ransomware Victims and Counting

ABN Abnormal Security New Photo 30

Ransomware has gotten a lot of attention in 2021, primarily due to the disruption attacks have caused to supply chains around the world. From Colonial Pipeline to Quanta, ransomware has made headlines and shows little sign of slowing down.

Ransomware Methodology, Victimology, and What to Expect in 2022

ABN Abnormal Security New Photo 14

As part of our research, we dove into why ransomware has changed and how each variable influences the overall threat of ransomware in distinctly different ways.

The Driving Factors Behind Today’s Ransomware Landscape

ABN Abnormal Security New Photo 15

New research from the Abnormal Threat Intelligence team shows that ransomware delivery methods have evolved, payouts are growing in frequency and total cost, and there are more malicious actors participating in ransomware than ever before.

New Ransomware Research Shows Growth Trends Across the Threat Landscape

ABN Abnormal Security New Photo 16

Our threat report on ransomware shares insight on attack methods, locations, payouts, and more across 4,200 victims.

The Evolution of Ransomware: Victims, Threat Actors, and What to Expect in 2022

ABN Abnormal Security New Photo 19

Ransomware is a major problem, and it’s not going away. To understand it, we must understand why threat actors turn to it—and how it can be stopped. The best way to do that is to chat with the masterminds behind these attacks.

Deconstructing the Ransomware Landscape: Interactions with a Threat Actor

ABN Abnormal Security New Photo 25

On August 12, 2021, we identified and blocked a number of emails sent to Abnormal Security customers soliciting them to become accomplices in an insider threat scheme. The goal was for them to infect their companies’ networks with ransomware. These emails allege to come from someone with ties to the DemonWare ransomware group.