Schedule a Demo - AI

Supply Chain Compromise

ABN Abnormal Security New Photo 1

Crane Profile Image

Crane Hassold

Executives are no longer the go-to impersonated party in business email compromise (BEC) attacks. Now, threat actors are opting to impersonate vendors instead.

New Abnormal Research Shows Rise in Financial Supply Chain Compromise as Attackers Turn to Vendor Impersonation

Business Email Compromise

ABN Abnormal Security New Photo 10

It’s IC3 Report week! In what has become an annual holiday for anyone that’s heavily involved in researching business email compromise (BEC) attacks, the FBI released its 2021 Internet Crime Report that details trends in various types of cybercrime activity over the past year.

Unlucky #7: FBI Data Shows BEC Is the Top Cyber Threat for Seventh Year in a Row

ABN Abnormal Security New Photo 11

Author jade hill

Jade Hill

Today, Abnormal released our H1 2022 Email Threat Report, focused on data from July to December 2021. Over the course of those six months, we tracked a relatively new form of cyber attack—phone fraud that starts via email.

New Research Shows Phone Fraud Targets 89% of Companies

Abnormal Intelligence Email Subscribe

<p>Subscribe to our monthly newsletter to receive the latest insights from our team directly in your inbox.</p>

Abnormal Blog

Top Bar

<p>New BEC Insights from Chris Krebs, Former Director of CISA</p>

ABN Abnormal Security New Photo 6

Threat Reports

Abnormal’s latest report on business email compromise trends and statistics found that the median open rate for text-based BEC attacks was nearly 28%.

H1 2023: “Read” Alert: Data Shows 28% of BEC Attacks Opened by Employees

Email Security

What’s in a Name? How the Abnormal Intelligence Team Names BEC Threat Groups

The Double-Edged Sword of ChatGPT: How Threat Actors Could Use It for Evil

ABN Abnormal Security New Photo 28

For years, executives were the go-to impersonated party in business email compromise attacks. Now, threat actors are opting to impersonate vendors and suppliers instead.

From CEO Fraud to Vendor Fraud: The Shift to Financial Supply Chain Compromise

Phishing Attacks Pose as Updated 2023 HR Policy Announcements

Homepage

Abnormal Intelligence Research

Breadcrumbs

Discover the latest email security insights and access white papers, solution briefs, case studies, webinars, and more in the Abnormal Resource Center.

Threat Intelligence Research | Abnormal

description

https://optimise2.assets-servd.host/gifted-zorilla/production/images/og-images/ABN-Reasearch-Open-Graph-Image_L3R1.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1659922852&s=31a2b97e4118a530b93ebc82f64f639d

https://intelligence.abnormalsecurity.com/resources

referrer

robots

twitter:card

twitter:creator

twitter:description

twitter:image

twitter:image:height

twitter:image:width

twitter:title

{"title":{"title":"Threat Intelligence Research | Abnormal"}}

Uncover the latest information on attacker strategies and trends across the email threat landscape.

Webinars

Threat Intel

AI B Firebrick Ostrich Blog

Discover how Firebrick Ostrich uses open-source intelligence to run their BEC scams in these supply chain compromise examples.

BEC Group Incorporates Secondary Impersonated Personas and Lookalike Domains in Convincing Third-Party Reconnaissance Attacks

B AI Threat Intel Phishing Attacks HR Policies

Threat actors are capitalizing on the new year, posing as human resources officials to send credential phishing attacks.

B 1500x1500 Threat Group Naming Convention AI L1 R1

Discover how the Abnormal Threat Intel team is able to track and categorize BEC attacks into threat groups and learn about the strategy we use to name the groups we identify.

B 1500x1500 Lilac Wolverine AI L1 R1

Threat group Lilac Wolverine is fine-tuning the art of exploiting people’s willingness to help others in some of the largest gift card attacks we've seen.

BEC Group Compromises Personal Accounts and Pulls Heartstrings to Launch Mass Gift Card Attacks

B 1500x1500 Q3 Ransomeware AI L1 R2

This post explores the continuation of the sharp decline in ransomware attacks as well as a few other notable data points from Q3 2022.

Q3 2022: Ransomware Activity Levels Off, but the Landscape is More Centralized Than Ever

B 1500x1500 Crimson Kingsnake AI L1 R1

Uncovering how threat group Crimson Kingsnake uses third-party impersonation tactics to swindle organizations across the world.

Crimson Kingsnake: BEC Group Impersonates International Law Firms in Blind Third-Party Impersonation Attacks

B 1500x1500 Active Defense AI L1 R1

Learn about active defense, an innovative approach our threat intel team uses to understand and block business email compromise attacks.

Active Defense: Socially Engineering the Social Engineers

B 10 3 22 Cobalt Terrapin Blog AI Site

Threat group Cobalt Terrapin uses sophisticated impersonation techniques with multiple steps to commit invoice fraud.

BEC Group Uses Manufactured Email Threads and Brand Impersonation to Facilitate Invoice Fraud

B Back to School AI 09 13 22

Discover how threat group Chiffon Herring leverages impersonation and spoofed email addresses to divert paychecks to mule accounts.

Back to School: BEC Group Targets Teachers with Payroll Diversion Attacks

B 08 22 22 AI Site Matanbuchus Malware Blog

Belem regalado author

Belem Regalado

In this attack, threat actors impersonate a teacher to deliver Matanbuchus malware-as-a-service (MaaS) using a Google Drive link.

Google Drive as a Distribution Method for Matanbuchus Malware

B 1500x1500 Q2 2022 Ransomware Landscape AI Site

The number of ransomware attacks continued its downward trend in Q2 2022. Learn why and discover more about ransomware threat actors and targets.