Security News > 2020 > September > Phishing gangs mounting high-ticket BEC attacks, average loss now $80,000
Agari reported average wire transfer loss from BEC attacks smashed all previous frontiers, spiking from $54,000 in the first quarter to $80,183 in Q2 2020 as spearphishing gangs reached for bigger returns.
During the second quarter of 2020, the average amount of gift cards requested by BEC attackers was $1,213, down from $1,453 in the first quarter of 2020.
The number of phishing sites detected in the second quarter of 2020 was 146,994, down from the 165,772 observed in the first quarter.
Attacks targeting the social media sector increased in Q2 about 20 percent over Q1, primarily driven by targeted attacks against Facebook and WhatsApp.
PhishLabs founder and CTO John LaCour observed, "The vast majority of certificates used in phishing attacks - 91 percent - are Domain Validated certificates. Interestingly, we found 27 web sites that were using Extended Validation certificates" - by hacking websites that already had them legitimately installed.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/sHKbz3tHgME/
Related news
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)
- FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services (source)
- Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail (source)
- YouTube warns of AI-generated video of its CEO used in phishing attacks (source)