DMARC Implementation Lags as Email Fraud Surges

guest · Mar 4, 2020

DMARC adoption grows but expertise fails to keep pace
March 4, 2020
https://betanews.com/2020/03/04/dmarc-adoption-expertise/

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a vendor-neutral authentication protocol that allows email domain owners to protect their domains from unauthorized use or spoofing.

A new report from anti-phishing specialist Valimail reveals that as of January 2020, nearly a million (933,973) domains have published DMARC records -- an increase of 70 percent compared to last year, and more than 180 percent growth in the last two years.

"Given DMARC’s benefits, it comes as no surprise its rate of adoption has been growing consistently," says Alexander García-Tobar, CEO and co-founder of Valimail. "But publishing a DMARC record is just the first step -- enforcement must be reached before a domain is protected, and trust can be restored to email.
There's an additional downside to not getting to enforcement: our research demonstrates that domains without DMARC policies at enforcement are spoofed nearly four times more often compared to domains with DMARC at enforcement. This is because fraudsters give up trying to spoof a domain once they realize it doesn't work, and move on to easier targets."
Click to expand...

Valimail: Domain spoofing declines as protective measures grow

guest · May 29, 2020

State health agencies lag in hardening email security, researchers say
May 28, 2020
https://statescoop.com/dmarc-email-state-health-agencies-hardening-email-security-proofpoint/

Research published Thursday by email security company Proofpoint found that nearly half of states’ health departments have not said if they’re using a critical protocol designed to prevent criminal activity like spoofing and phishing, a disturbing finding at a time when the internet is rife with scams attempting to take advantage of the COVID-19 pandemic.

Proofpoint said that 44% of state health departments do not have a published record of using Domain-based Message Authentication, Reporting & Conformance, or DMARC, on their email servers, which could make it easier for actors to impersonate those agencies and commit email fraud on unwitting victims.
The research did not specify which states lack a published DMARC protocol.

Additionally, Proofpoint said it found that 92% of all state government agencies — and 88% of state health departments — are not using the strictest DMARC settings to protect their email systems.
Click to expand...

Proofpoint: More than 80% of State Governments and Health Departments Exposed to Email Fraud Risk

guest · Jun 10, 2020

Working Group Calls for Greater DMARC Support and Adoption
June 10, 2020
https://www.infosecurity-magazine.com/news/working-dmarc-adoption/

In an open statement shared with Infosecurity, the Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) made a call for further steps to be taken to “authenticate and secure sending domains and email addresses by deploying email authentication at scale and at enforcement.”

In an email to Infosecurity, David Appelbaum, CMO of Valimail, said the company is seeing a marked rise in DMARC deployment across the board, not just from its own customers, but among all domains worldwide.

“The rash of COVID19-themed phishing attacks, many of which have spoofed those governments and NGOs left unprotected by DMARC, has absolutely contributed to an increased awareness of DMARC (not to mention DKIM and SPF),” he said.
“M3AAWG is absolutely right to recommend DMARC, and in particular, to insist on the importance of configuring it with an enforcement policy. Anything less leaves domain owners open to being spoofed by the worst kind of opportunistic criminals."
Click to expand...

guest · Jul 10, 2020

UK diners and pubgoers at risk of email fraud as lockdown restrictions are eased
July 9, 2020
https://www.proofpoint.com/uk/newsr...k-email-fraud-lockdown-restrictions-are-eased

Proofpoint, Inc., (NASDAQ: PFPT) a leading cyber security and compliance company, today released research identifying that only 1 (2%) of the UK’s top 50 most popular dining and pub brands has implemented the strictest level of DMARC (Domain-based Message Authentication, Reporting & Conformance) protection. This protocol stops cybercriminals spoofing an organisation’s identity and decreases the risk of email fraud for customers.

Worryingly, this means the remaining 98% are not proactively blocking fraudulent emails from reaching customers, putting pubgoers and diners at risk. Of the 50 most popular brands, over two-thirds (70%) have no published DMARC record at all, leaving themselves wide open to impersonation attacks.
In addition, at a time when consumers are eagerly awaiting communication from their favourite food or pub brands for deals and opening times, cybercriminals may prey on this anticipation to trick users.
Click to expand...

Key highlights

98% of the 50 most popular pub and dining brands in the UK are not proactively blocking fraudulent emails from reaching customers, by not having implemented the strictest and recommended level of DMARC protection

35 of the 50 (70%) most popular pub and dining brands in the UK have no published DMARC record at all, leaving themselves wide open to impersonation attacks

Methodology: To assess the level of DMARC adoption among pubs and restaurants in the UK, Proofpoint conducted an analysis of the official corporate .co.uk and .com domains of 50 of the top 88 brands featured on YouGov’s list of The most popular dining brands in the UK.
Click to expand...

Minimalist · Jul 14, 2020

DMARC Adoption Spikes, Higher Ed Remains Behind

Adoption of the email security protocol DMARC has continued to tick upwards, with the number of domains deploying DMARC records surpassing 1 million in the last two years — a 2.5 times greater total than in 2018.
Click to expand...

https://threatpost.com/dmarc-adoption-spikes-higher-ed-remains-behind

guest · Aug 18, 2020

61% of Airlines Have No Published DMARC Record, Customers Susceptible to Email Fraud
August 18, 2020
https://www.infosecurity-magazine.com/news/airlines-published-dmarc-email/

The majority of airline companies are potentially leaving their customers vulnerable to email fraud, such as phishing, according to a new analysis by Proofpoint.

It found that 61% of member airlines belonging to the International Air Transport Association (IATA) do not have a published Domain-based Message Authentication, Reporting & Conformance (DMARC) record, increasing the risk of having their identity spoofed and of customers being targeted by email fraud. IATA member airlines make up 82% of total air traffic.
In addition, 93% of global airlines included in the study have not implemented the recommended level of DMARC protection, known as Reject. This blocks fraudulent emails from reaching their intended target.
Click to expand...

“Worryingly, at a time when opportunistic cyber-criminals may look to take advantage of such global uncertainty, the majority of international airlines are leaving their customers exposed to email fraud.”
Click to expand...

Proofpoint: More than 90% of Global Airlines Exposed to Email Fraud Risk

Log in or Sign up

DMARC Implementation Lags as Email Fraud Surges

guest Guest

guest Guest

guest Guest

guest Guest

Minimalist Registered Member

guest Guest

Log in or Sign up

DMARC Implementation Lags as Email Fraud Surges

guest Guest

guest Guest

guest Guest

guest Guest

Minimalist Registered Member

guest Guest

Useful Searches