Email Attacks Using Cloud Services are Increasing

guest · Oct 8, 2019

Email Attacks Using Cloud Services are Increasing
October 8, 2019
https://www.securityweek.com/email-attacks-using-cloud-services-are-increasing

FireEye's latest email threat update highlights three specific themes: attackers are following business in making greater use of the cloud; Microsoft is by far the most abused brand in phishing attacks; and, according to FireEye's VP & GM of email security, Michael Hulton, "Attackers follow the money, leading to a shakeup in the most targeted vertical industries."

Email attacks have increased over time. Eighty-six percent of them in Q2 can be described as 'malwareless', comprising, for example, impersonation attacks, CEO/BEC fraud, and spear-phishing. The remaining 14% contain malware.
The BEC and CEO fraud variants have increased by 25% between Q1 and Q2. Unsurprisingly, given the work-based nature of these frauds, there is a higher frequency of them on workdays.

The cloud is increasingly being used to host the malicious URLs. The Office 365 cloud-based service and the Microsoft Azure platform and services are favorites. Page hosting platforms such as wixsite(.)com3, 000webhostapp(.)com4 and others are used. File preview links are used to direct users to pages hosted on file sharing services such as OneDrive, Drive, Dropbox and Box.
Click to expand...

FireEye: FireEye Email Threat Update: How Attackers are Getting Ahead in the Cloud

Log in or Sign up

Email Attacks Using Cloud Services are Increasing

guest Guest

Log in or Sign up

Email Attacks Using Cloud Services are Increasing

guest Guest

Useful Searches