Security News > 2020 > September > Phishing gangs mounting high-ticket BEC attacks, average loss now $80,000
Agari reported average wire transfer loss from BEC attacks smashed all previous frontiers, spiking from $54,000 in the first quarter to $80,183 in Q2 2020 as spearphishing gangs reached for bigger returns.
During the second quarter of 2020, the average amount of gift cards requested by BEC attackers was $1,213, down from $1,453 in the first quarter of 2020.
The number of phishing sites detected in the second quarter of 2020 was 146,994, down from the 165,772 observed in the first quarter.
Attacks targeting the social media sector increased in Q2 about 20 percent over Q1, primarily driven by targeted attacks against Facebook and WhatsApp.
PhishLabs founder and CTO John LaCour observed, "The vast majority of certificates used in phishing attacks - 91 percent - are Domain Validated certificates. Interestingly, we found 27 web sites that were using Extended Validation certificates" - by hacking websites that already had them legitimately installed.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/sHKbz3tHgME/
Related news
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks (source)
- iOS devices face twice the phishing attacks of Android (source)
- Windows NTLM hash leak flaw exploited in phishing attacks on governments (source)
- Three Reasons Why the Browser is Best for Stopping Phishing Attacks (source)
- Phishing detection is broken: Why most attacks feel like a zero day (source)
- DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack (source)
- Low-tech phishing attacks are gaining ground (source)
- MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks (source)
- Focused Phishing: Attack Targets Victims With Trusted Sites and Live Validation (source)
- CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users (source)