Threat Spotlight: Bait attacks

guest · Nov 11, 2021

Gmail accounts are used in 91% of all baiting email attacks
November 11, 2021
https://www.bleepingcomputer.com/ne...d-in-91-percent-of-all-baiting-email-attacks/

Bait attacks are on the rise, and it appears that actors who distribute this special kind of phishing emails prefer to use Gmail accounts to conduct their attacks.

According to a report by Barracuda, who surveyed 10,500 organizations, 35% of them received at least one bait attack email in September 2021 alone.
Click to expand...

What is a baiting attack?
A "bait attack" is a sub-class of phishing where threat actors attempt to gather basic information about a specific target and use it for more targeted and effective attacks in the future.

It is a preparatory reconnaissance step that seldom comes with payloads or embedded links on the email body.
Since these emails don't include any links to phishing sites and don't carry any attachments, they usually pass through phishing defense systems as they are not seen as malicious.
Click to expand...

Why Gmail?
Barracuda's stats show that 91% of all these bait emails are sent from newly-created Gmail accounts, while all other email platforms account for just 9%.

Moreover, Gmail is a platform that allows the quick and easy creation of pseudonymous accounts without much fuss.
Click to expand...

What if the bait is taken?
Barracuda decided to experiment by replying to these baiting emails, which aren't supposed to initiate the phishing process.

Within 48 hours, the security firm employee received a targeted phishing attack used after a false Norton LifeLock purchase claim.
This quick response demonstrates the readiness of the actors and the tight connection between these innocuous-looking empty emails and fully-fledged phishing attacks.
Click to expand...

Log in or Sign up

Threat Spotlight: Bait attacks

guest Guest

Log in or Sign up

Threat Spotlight: Bait attacks

guest Guest

Useful Searches