Business emails are now more dangerous than ransomware
Ransomware is no longer the most popular attack vector
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
When it comes to hackers looking solely for profit -ransomwareis no longer the number one weapon of choice, new research has claimed.
Instead, their primary method is Business Email Compromise (BEC) attacks, a report from cybersecurity experts Secureworks analyzing more than 500 real-world security incidents that took place between January and December 2022 found, with the number of BEC incidents doubling to become the most common type of attack, dethroning ransomware.
The company believes this explosive growth in BEC attacks has its roots in successful phishing campaigns, which account for a third (33%) of incidents where an initial access vector (IAV) could be established. A year ago, phishing accounted for merely 13% of incidents (up 3x year-on-year). Besides phishing, hackers would also look for system and application vulnerabilities, zero-day or otherwise.
Low-skill attack
Ransomware incidents dropped by more than half (57%) last year, Secureworks added, but stated that it still remains a “core” threat. The drop could be, the researchers speculate, either due to the threat actors’ changing tactics, or due to law enforcement agencies getting better and hunting them down and shutting down their infrastructure.
Another reason for the change could be because BEC are easier to pull off:
Business email attacks are now a multi-billion dollar industry>The many moving parts of business email compromise>Check out the best malware removal tools right now
“Business email compromise requires little to no technical skill but can be extremely lucrative,” says Mike McLellan, Director of Intelligence at Secureworks. “Attackers can simultaneously phish multiple organizations looking for potential victims, without needing to employ advanced skills or operate complicated affiliate models”.
To make sure you stay safe from BEC attacks, educate your employees to spot phishing emails, and set up a strong email security system. Multi-factor authentication, wherever possible, will be of tremendous help. Furthermore, both employees and executives need to keep email access to themselves, and not share the login credentials with their coworkers, friends, and family.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
The news follows a warning from the FBI in May 2022 that BEC had grown into a $43 billion industry.
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
A new form of macOS malware is being used by devious North Korean hackers
Scammers are using fake copyright infringement claims to hack businesses
Australian Beach Volleyball Tour live stream: How to watch bronze and gold medal matches online for free, finals, start time
