Hackers are working harder to make phishing and malware look legitimate

guest · Mar 13, 2020

Hackers are working harder to make phishing and malware look legitimate
March 11, 2020
https://www.techrepublic.com/articl...to-make-phishing-and-malware-look-legitimate/

Even though the overall volume of malware dropped in 2019, phishing and business email compromise (BEC) went up sharply, according to Trend Micro's 2019 Cloud App Security Roundup. The company detected over a million instances of malware in 2018 and 960,000 in 2019. Trend Micro blocked nearly 400,000 attempted BEC attacks in 2018, which is 271% more than the previous year and 35% more credential phishing attempts than in 2018.

More than 11 million of the 12.7 million high-risk emails blocked in 2019 were phishing related, making up 89% of all blocked emails.

Bad actors also are increasingly using HTTPS and targeting Office 365 administrator accounts, allowing them to hijack all connected accounts on the targeted domain and use them to send malware and launch BEC attacks.
Click to expand...

Trend Micro described some of the more inventive approaches in the new report:

Phishing emails with an attachment that contained malicious remote templates loaded from remote servers

Spam emails containing malicious ISO attachments and using steganography to hide its tracks

Spam campaigns that use public and hosted cloud infrastructures to make attacks look more legitimate

Phishing kits that using innocent-looking text when a security professional tries to view source code in a browser

Click to expand...

Targeting cloud-based SaaS platforms
For one organization with about 80,000 Office 365 users, Trend Micro Cloud App Security detected over 550,000 high-risk email threats after they passed through Microsoft's native email security filter.
At a smaller company with 1,000 Gmail users, Trend Micro found 900 malicious emails in only a three-month period, almost one per employee.

Bad actors also are using new credential phishing techniques, including malicious voice mails and shared files. One phishing campaign in July 2019 used fake OneNote Online pages hosted on a SharePoint subdomain that linked to a fake Microsoft login page.
Click to expand...

Trend Micro: Trend Micro Cloud App Security Report 2019

Log in or Sign up

Hackers are working harder to make phishing and malware look legitimate

guest Guest

Log in or Sign up

Hackers are working harder to make phishing and malware look legitimate

guest Guest

Useful Searches