Why did this Bank of America phishing email bypass spam filters?

guest · Jun 18, 2020

Why did this Bank of America phishing email bypass spam filters?
June 18, 2020
https://www.bleepingcomputer.com/ne...f-america-phishing-email-bypass-spam-filters/

Threat actors trying to steal your credentials through phishing attackers is nothing new, and the number of campaigns has only been rising in recent times.

Due to this, attackers continuously come up with new tricks to bypass secure email gateways, such as foreign languages, CSS tricks, specially crafted ZIP files, and hacked SharePoint sites.
This week, however, we learned of a new strand of Bank of America phishing emails making their way through to Outlook inboxes. These emails bypassed security controls despite there being enough clues that they are part of a phishing attack.
Click to expand...

ArmorBlox cofounder Chetan Anand shined some light on the matter here:

"This email got past existing email security controls because it didn’t follow the tenets of more traditional phishing attacks."
Anand noted that this was not a mass email but targeted only a few people in the organization.
Secondly, the phishing email passed all of the security checks: "Although the sender name - Bank of America - was impersonated, the email was sent from a personal Yahoo account via SendGrid," said Anand.

Finally, the email body didn’t contain any domains which could yet be recognized as malicious. This is because of, what Armorblox called "zero-day link and look alike website."
Click to expand...

Armorblox: Blox Tales #7: Bank of America Credential Phishing

This email claimed to come from Bank of America and asked readers to update their email address. Clicking the link took the targets to the credential phishing page resembling the Bank of America home page, designed to make targets part with their account credentials.
Click to expand...

Log in or Sign up

Why did this Bank of America phishing email bypass spam filters?

guest Guest

Log in or Sign up

Why did this Bank of America phishing email bypass spam filters?

guest Guest

Useful Searches