Impersonation Phishing Attacks Increase as Credentials Take the Lead as the Primary Target

New data shows an upswell of email-based cyberattacks, with over 256 brands being impersonated, as social media, Microsoft, shipping, and ecommerce brands top the list.

There’s been a lot of changes in the volume of email-based cyberattacks, according to security analysts at Abnormal Security. According to their H2 2022 Email Threat Report, the number of attacks per 1,000 mailboxes has increased over the last 12 months by nearly 50%. And if you take into consideration the all-time low in January of this year, the number of email-based attacks just six months later are nearly 4 times as much as at the beginning of 2022.

The overwhelming majority (68%) of email-based attacks were phishing attacks. Most of these attacks were targeting credentials using the impersonation of well-known brands. According to the report, nearly one-third (32%) impersonated a social network (LinkedIn was the top brand impersonated – something corroborated by a recent report from Checkpoint). One-fifth of phishing attacks impersonated Microsoft. In both cases, the predominant attack trait was an intent to steal the victim’s credentials to that platform.

The emails are well-written and look official. Here’s an example of one impersonating LinkedIn:

Source: Checkpoint

And another impersonating Microsoft:

Source: Checkpoint

Over 256 individual brands were impersonated – including financial services, ecommerce, business management, infosec, travel, telecom, and more. The goal is to obtain viable credentials that can be used to launch additional campaigns from a legitimate email account, access bank accounts, sell on the dark web for access to a corporate network, and more.

Phishing attacks are the root of the problem and require a layered solution that includes conditioning your users to remain vigilant each and every time they interact with an email – something taught through continual Security Awareness Training. The sooner users default to assuming any email that seems suspicious or unexpected is considered malicious until proven otherwise, the better for organizations today.

Source: KnowBe4

Principal Owner, Marketing Firm

Bringing IT360 on as our technology services “department” was one of the smartest business decisions we’ve made. Over the years, we’ve tried various similar services and have also hired internal IT staff, and we’ve never felt confident that we were adequately supported. IT360 has changed all that. They not only provide proactive, comprehensive technical support and consulting, they engage with us in a way that feels like they are part of our company…a true business partner.

Principal Owner, Marketing Firm

Technology News

IT 360 News
What Is Business Email Compromise and Should I Be Concerned?

Did you know that email is the starting point for 91% of cyberattacks?* According to the FBI’s 2022 Congressional Report, business email compromise (BEC) is one of the fastest growing and most financially damaging internet enabled crimes. In 2022, the total adjusted losses from BEC accounted for over $2.7 billion, as reported by the Internet […]

Read more
IT 360 News
Cyber Savvy Shopping: Top IT Tips for Staying Safe on Black Friday and Cyber Monday

Black Friday and Cyber Monday are two of the biggest shopping events of the year, offering enticing deals and discounts on a wide range of products. However, as you scour the internet for the best bargains, it’s crucial to keep your cybersecurity in mind. Cybercriminals often exploit the shopping frenzy to launch various scams and […]

Read more