Supply Chain Compromise

ABN Abnormal Security New Photo 1

Crane Profile Image

Crane Hassold

Executives are no longer the go-to impersonated party in business email compromise (BEC) attacks. Now, threat actors are opting to impersonate vendors instead.

New Abnormal Research Shows Rise in Financial Supply Chain Compromise as Attackers Turn to Vendor Impersonation

Business Email Compromise

ABN Abnormal Security New Photo 10

It’s IC3 Report week! In what has become an annual holiday for anyone that’s heavily involved in researching business email compromise (BEC) attacks, the FBI released its 2021 Internet Crime Report that details trends in various types of cybercrime activity over the past year.

Unlucky #7: FBI Data Shows BEC Is the Top Cyber Threat for Seventh Year in a Row

Emerging Attacks

ABN Abnormal Security New Photo 11

Author jade hill

Jade Hill

Today, Abnormal released our H1 2022 Email Threat Report, focused on data from July to December 2021. Over the course of those six months, we tracked a relatively new form of cyber attack—phone fraud that starts via email.

New Research Shows Phone Fraud Targets 89% of Companies

Abnormal Intelligence Email Subscribe

<p>Subscribe to our monthly newsletter to receive the latest insights from our team directly in your inbox.</p>

Abnormal Blog

Top Bar

<p>New BEC Insights from Chris Krebs, Former Director of CISA</p>

B 08 08 22 H2 Threat Report AI

Threat Reports

From January-June 2022, Abnormal Security found a 48% increase in email attacks over the previous six months, and 68.5% of those attacks included a credential phishing link.﻿

H2 2022: Threat Actors Impersonate 265 Different Brands in Credential Phishing Attacks

Email Security

ABN Abnormal Security New Photo 28

For years, executives were the go-to impersonated party in business email compromise attacks. Now, threat actors are opting to impersonate vendors and suppliers instead.

From CEO Fraud to Vendor Fraud: The Shift to Financial Supply Chain Compromise

Stripe Website Impersonated in Credential Phishing Attack

ABN Abnormal Security New Photo 30

Webinars

Ransomware has gotten a lot of attention in 2021, primarily due to the disruption attacks have caused to supply chains around the world. From Colonial Pipeline to Quanta, ransomware has made headlines and shows little sign of slowing down.

Ransomware Methodology, Victimology, and What to Expect in 2022

Ransomware

Homepage

Abnormal Intelligence Research

Breadcrumbs

Discover the latest email security insights and access white papers, solution briefs, case studies, webinars, and more in the Abnormal Resource Center.

Threat Intelligence Research | Abnormal

description

generator

https://optimise2.assets-servd.host/gifted-zorilla/production/images/og-images/ABN-Reasearch-Open-Graph-Image_L3R1.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1659922852&s=31a2b97e4118a530b93ebc82f64f639d

https://intelligence.abnormalsecurity.com/resources

referrer

robots

{"title":{"title":"Abnormal Intelligence | Threat Intelligence Research | Abnormal"}}

Uncover the latest information on attacker strategies and trends across the email threat landscape.

Threat Intel

B Back to School AI 09 13 22

Discover how threat group Chiffon Herring leverages impersonation and spoofed email addresses to divert paychecks to mule accounts.

Back to School: BEC Group Targets Teachers with Payroll Diversion Attacks

B 08 22 22 AI Site Matanbuchus Malware Blog

Belem regalado author

Belem Regalado

In this attack, threat actors impersonate a teacher to deliver Matanbuchus malware-as-a-service (MaaS) using a Google Drive link.

Google Drive as a Distribution Method for Matanbuchus Malware

B 1500x1500 Q2 2022 Ransomware Landscape AI Site

The number of ransomware attacks continued its downward trend in Q2 2022. Learn why and discover more about ransomware threat actors and targets.

Q2 2022: Ransomware Landscape Continues Its Decline as Another Major Group Shuts Down

ABN Abnormal Security New Photo 3

Here’s an in-depth analysis of the 62 most prominent ransomware groups and their activities since January 2020.

A Deep Dive into Active Ransomware Groups

ABN Abnormal Security New Photo 4

Author rachelle chouinard

Rachelle Chouinard

See how threat actors used a single mailbox compromise and spoofed domains to subtly impersonate individuals and businesses to coerce victims to pay fraudulent vendor invoices.

Hybrid Executive and Vendor Impersonation Attack Uses Fake Email Chain and Fake Invoices

ABN Abnormal Security New Photo 5

Like all threats in the cyber threat landscape, ransomware will continue to evolve over time. This post builds on our prior research and looks at the changes we observed in the ransomware threat landscape in the first quarter of 2022.

Ransomware Volume Drops as a Main Player Exits the Stage

ABN Abnormal Security New Photo 9

Threat actors are posing as businesses and individuals seeking tax preparation services and then providing copies of the Sorillus client remote access tool (RAT).

Tax Return Customer Campaign Attempts to Infect Victims with Sorillus RAT

ABN Abnormal Security New Photo 12

Actors are now exploiting the customer contact form on websites to bypass email security and encourage BazarLoader downloads.

BazarLoader Actors Initiate Contact via Website Contact Forms

ABN Abnormal Security New Photo 13

Looking at the overall volume trends, there have been two main spikes in ransomware activity over the last two years.

The Victimology of Ransomware: 4,200 Ransomware Victims and Counting

ABN Abnormal Security New Photo 14

As part of our research, we dove into why ransomware has changed and how each variable influences the overall threat of ransomware in distinctly different ways.

The Driving Factors Behind Today’s Ransomware Landscape

ABN Abnormal Security New Photo 15

New research from the Abnormal Threat Intelligence team shows that ransomware delivery methods have evolved, payouts are growing in frequency and total cost, and there are more malicious actors participating in ransomware than ever before.

New Ransomware Research Shows Growth Trends Across the Threat Landscape

ABN Abnormal Security New Photo 17

When the typical person thinks about cybercrime, they may think of ransomware or identity theft, or perhaps the ubiquitous Nigerian prince scams targeting their unsuspecting grandmother

The Connections Between West African Cybercrime & Business Email Compromise

ABN Abnormal Security New Photo 20

On November 9, 2021, we identified an unusual phishing email that claimed to be from “Immigration Visa and Travel,” inviting the recipient to renew their membership in the TSA PreCheck program. The email wasn’t sent from a .gov domain, but the average consumer might not immediately reject it as a scam, particularly because it had the term “immigrationvisaforms” in the domain. The email instructed the user to renew their membership at another quasi-legitimate-looking website.

TSA PreCheck Scam Dupes Travelers into Paying Excess Fees

ABN Abnormal Security New Photo 25

On August 12, 2021, we identified and blocked a number of emails sent to Abnormal Security customers soliciting them to become accomplices in an insider threat scheme. The goal was for them to infect their companies’ networks with ransomware. These emails allege to come from someone with ties to the DemonWare ransomware group.