• Why IRONSCALES
  • Platform
    Spring '24 Software Release! Check out our new deep image-based detection, GWS capabilities, and more. Explore the new additions
  • Solutions
  • Learn
    New Report! Osterman Research releases their 2024 findings on Image-based/QR Code Attacks. Read the report
  • Partner
  • Pricing

IRONSCALES Blog

Chrissy Reynoso
by Chrissy Reynoso
on April 26, 2024

Email security leader recognized for business innovation and growth, ranking #49 by the Atlanta Business Chronicle.

Audian Paxson
by Audian Paxson
on April 24, 2024

Imagine asking ChatGPT how to make lasagna from scratch and getting this response:

Jeff Rezabek
by Jeff Rezabek
on April 18, 2024

Business Email Compromise (BEC) attacks are still top of mind and creating many headaches for IT and Security leaders. Failure to detect these sophisticated threats could result in data exposure, ...

Audian Paxson
by Audian Paxson
on April 12, 2024

In the first blog of this series on image-based and QR-code phishing attacks, I explored the security-confidence dichotomy that Osterman Research uncovered—where organizations overestimate their ...

by Jenna Knoblauch
on April 10, 2024

3 Reasons to Visit IRONSCALES at RSA Conference 2024  The countdown is on to the RSA Conference in San Francisco, and we're buzzing with excitement to connect with you at this year’s biggest ...

Chrissy Reynoso
by Chrissy Reynoso
on April 08, 2024

The unveiling of the G2 Spring 2024 Awards highlighted and honored key players in the email security industry with IRONSCALES standing out in numerous categories. Taking home 23 badges, one ...

Chrissy Reynoso
by Chrissy Reynoso
on April 01, 2024

IRONSCALES has been recognized as a “Top Solution” provider by Expert Insights in the Q1 2024 Awards.

Jeff Rezabek
by Jeff Rezabek
on March 29, 2024

Earlier this month, Expert Insights recognized IRONSCALES as a Top Solution for Google Workspace. Little did they know that a few weeks later, we would completely redefine the email security ...

Chrissy Reynoso
by Chrissy Reynoso
on March 25, 2024

We are thrilled to announce that we have been honored by CRN®, a brand of The Channel Company, with inclusion in its 2024 Partner Program Guide. This annual guide provides essential information to ...

Audian Paxson
by Audian Paxson
on March 20, 2024

This blog is the first in a series about our report we developed with Osterman Research, Enterprise Insights - Image-Based and QR Code Phishing Attacks (you can read the report here).

Jeff Rezabek
by Jeff Rezabek
on March 08, 2024

While QR code and Image-based phishing threats may be sounding alarms in 2024, the threat of Business Email Compromise (BEC) raged in 2023. The FBI's 2023 Internet Crime Report underscores this ...

Audian Paxson
by Audian Paxson
on February 27, 2024

Email security remains a critical concern for businesses as phishing and Business Email Compromise (BEC) attack methods evolve. Traditionally, Secure Email Gateways (SEGs) served as the front line of ...

Jeff Rezabek
by Jeff Rezabek
on February 22, 2024

Email remains a primary threat vector for cyber-attacks, compromising organizational integrity and data security. IT and security leaders face the dual challenge of staying ahead of sophisticated ...

Audian Paxson
by Audian Paxson
on February 14, 2024

"Guess what? While you were reading this sentence, another company just fell victim to a phishing attack." No, this isn't a punchline at a cybersecurity conference...it's the somewhat alarming ...

Chrissy Reynoso
by Chrissy Reynoso
on February 08, 2024

We are honored to announce that we have been recognized by G2, one of the largest and most trusted software marketplace, by securing multiple accolades in the Winter 2024 Awards. The award ...

Jeff Rezabek
by Jeff Rezabek
on February 08, 2024

Struggling with email invoice scams can be a nightmare for any business. These devious schemes threaten your company's financial health and jeopardize your reputation. You're not alone in this fight; ...

Jeff Rezabek
by Jeff Rezabek
on February 01, 2024

The difference between safety and a data breach often hinges on a single email. But for IT and security teams juggling numerous tasks, creating effective phishing simulation campaigns often falls by ...

Chrissy Reynoso
by Chrissy Reynoso
on January 29, 2024

We are thrilled to share that IRONSCALES has been named the Category Leader in Email Security by Channel Program. This prestigious recognition is a testament to our exceptional contributions and ...

Eyal Benishti
by Eyal Benishti
on January 25, 2024

In the digital age, where email is a cornerstone of communication, particularly in the business sphere, ensuring its security is paramount. The emergence of AI-driven solutions like Co-Pilot AI ...

Audian Paxson
by Audian Paxson
on January 22, 2024

The recent Microsoft account takeover hack/attack reminds us of a crucial reality…in the cyber world, giants are not invincible. This alarming breach serves as a vivid illustration of why artificial ...

Audian Paxson
by Audian Paxson
on January 19, 2024

If you're a cybersecurity practitioner for an SMB, you know the drill. You're often a one-person army, juggling everything from hand-wringing desktop support to updating firewalls, onboarding new ...

Jeff Rezabek
by Jeff Rezabek
on January 12, 2024

A recent Deloitte survey revealed that 76% of manufacturers are adopting digital tools to gain enhanced transparency in their supply chain. However, as the manufacturers adopt these new tools, they ...

Audian Paxson
by Audian Paxson
on January 03, 2024

The line between personal and professional life is increasingly blurred, especially when it comes to the use of work devices. While most employees are vigilant about corporate emails, there's a ...

Jeff Rezabek
by Jeff Rezabek
on December 29, 2023

Email security is often a cat-and-mouse game where cybercriminals utilize new phishing technologies and techniques to expose vulnerabilities and avoid detection—and 2023 was no different. Recent ...

Audian Paxson
by Audian Paxson
on December 14, 2023

Let's touch on a topic that IT/Security admins can't afford to overlook—phishing simulation testing. Sure, I know it can be a hassle, but trust me, it's a crucial element in your cybersecurity ...

Chrissy Reynoso
by Chrissy Reynoso
on November 28, 2023

We are thrilled to announce that IRONSCALES was awarded the prestigious "Top Solution" award from Expert Insights, a B2B tech research platform. This coveted award underscores the unwavering ...

Jeff Rezabek
by Jeff Rezabek
on November 22, 2023

Artificial Intelligence (AI) has become a technology focal point across every industry. While some “powered by AI” features are more gimmick than game change, one industry that has rapidly ...

Jeff Rezabek
by Jeff Rezabek
on November 16, 2023

The holiday shopping season is crucial for retail sales. However, it's also a period when phishing attacks intensify. With over 90% of successful cyber-attacks starting from a phishing email, ...

Jeff Rezabek
by Jeff Rezabek
on November 08, 2023

As cyber attackers evolve, so do their methods (and their disguises). Lately, one of the emerging techniques used by these attackers is the use of images in the body of an email that appears to be ...

Audian Paxson
by Audian Paxson
on November 03, 2023

Nobody likes to deal with passwords. They are a pain to create and hard to remember while keeping them safe. But they are, for now, still critical in keeping us all secure. And they are part of the ...

by Savannah DaCosta
on October 30, 2023

With the launch of the exclusive IRONSCALES Discord Server for customers and partners, this thriving community aims to bring together like-minded cybersecurity experts to collaborate, share insights, ...

Audian Paxson
by Audian Paxson
on October 24, 2023

In a digital realm where the baddies are always on the lookout for a loophole to sneak through, fortifying our online data and activity is more crucial than ever. This year's Cybersecurity Awareness ...

Eyal Benishti
by Eyal Benishti
on October 20, 2023

In an ever-evolving digital landscape, cybersecurity threats are not just a buzzword; they are a harsh reality that organizations face daily. While new technology promises to shield us from cyber ...

Or Malzman
by Or Malzman
on October 09, 2023

It’s no secret that cybercriminals leverage current events and holidays to mask their phishing attempts, create urgency, and improve their chances of a successful attack. While many security and IT ...

by Jenna Knoblauch
on September 28, 2023

Emerging threats created by generative AI evade traditional defenses, BEC attacks with differentiated file types and sender names are on the rise.

by Andrew Roehm
on September 14, 2023

In recent times, the world of cybersecurity has been forced to confront a new and unsettling reality: the emergence of malicious Generative AI, often embodied by ominous names like FraudGPT and ...

by Andrew Roehm
on September 01, 2023

In our hyper- connected world, data mishaps are the new normal. Data breaches, data leaks, and data loss have become major concerns for organizations of all sizes. These incidents not only pose ...

by Jenna Knoblauch
on August 31, 2023

IRONSCALES, the leading enterprise cloud email security platform combining AI and human insights to protect more than 10,000 global organizations, is thrilled to announce the appointment of Matthew ...

Audian Paxson
by Audian Paxson
on August 29, 2023

In my two decades of working in product management and marketing for various cybersecurity technologies, I've had the privilege of engaging with hundreds of real-world practitioners. These ...

by Jenna Knoblauch
on August 24, 2023

In the ever-evolving world of cyber threats, threat actors are constantly finding new ways to exploit vulnerabilities and trick individuals and organizations into divulging sensitive information. One ...

Eyal Benishti
by Eyal Benishti
on August 23, 2023

Business email compromise (BEC) is one of the most costly and damaging types of email threats, as it relies on social engineering, deception and impersonation to defraud the recipient. According to ...

Henrik Davidsson
by Henrik Davidsson
on August 18, 2023

Consider this scenario An attacker sends a phishing email to lure an end user within an organization into clicking a malicious link, opening an attachment, or providing login credentials. Once the ...

by Jenna Knoblauch
on August 15, 2023

Email Security Leader Ranks No. 1300 on the 2023 Inc. 5000 With Three-Year Revenue Growth of 451% Percent

Jeff Rezabek
by Jeff Rezabek
on August 09, 2023

Phishing threats are evolving faster than ever before, becoming more sophisticated and more challenging to detect by legacy systems. With threat actors leveraging AI to compose convincing phishing ...

Hila Kahana
by Hila Kahana
on July 26, 2023

In today's digital landscape, the threat of phishing attacks continues to rise, affecting organizations of all sizes. Cybercriminals are employing increasingly sophisticated methods, including the ...

Henrik Davidsson
by Henrik Davidsson
on July 21, 2023

NIS2 (Network and Information Systems Directive) is a European Union regulation that aims to enhance cybersecurity and resilience of network and information systems within critical infrastructure ...

Audian Paxson
by Audian Paxson
on July 11, 2023

Ransomware has become a persistent and costly threat in today's digital landscape, affecting organizations across various industries. In this blog post, we will explore the market landscape of ...

by Andrew Roehm
on July 10, 2023

Introduction The release of the 2023 Verizon Data Breach Investigations Report (DBIR) offers valuable insights into the current state of cyberthreats and data breaches. In this comprehensive ...

by Andrew Roehm
on June 29, 2023

We're only half-way through 2023 and it has been a breakneck year in cybersecurity. While the expected advancements of things like artificial intelligence (AI) and Zero Trust have been focal points ...

Audian Paxson
by Audian Paxson
on June 21, 2023

In the current era of remote work, organizations are grappling with a myriad of cybersecurity challenges. In our recent commissioned report by Enterprise Strategy Group (ESG), Tackling SaaS ...

Jeff Rezabek
by Jeff Rezabek
on June 09, 2023

Secure Email Gateways (SEG)s have been a staple in many organizations’ strategies to curb email phishing and spam messages from disrupting business and targeting employees. They’ve become so ...

by Andrew Roehm
on June 02, 2023

New vulnerabilities, new attacks. New technologies, new attacks. New defenses, new attacks. Keeping up with the newest attack methods is almost as hard as keeping up with ChatGPT-based apps, ...

Eyal Benishti
by Eyal Benishti
on June 02, 2023

The phishing landscape is morphing rapidly. Cybercriminals are devising various attacks leveraging new tactics and technology to evade traditional, rule-based email security solutions and static-AI ...

Jeff Rezabek
by Jeff Rezabek
on May 19, 2023

It’s easy for organizations to get so caught up in trying to win new deals that they forget about their existing customers. But that isn’t the case at IRONSCALES. Our customers are a part of our ...

by Nicole Baxby
on May 09, 2023

The IRONSCALES team was thrilled to attend RSA Conference 2023 in San Francisco. The conference brought together 43,000 cybersecurity industry experts and thought leaders from across the globe. There ...

Eyal Benishti
by Eyal Benishti
on May 08, 2023

Artificial intelligence (AI) is revolutionizing various domains with its ability to learn, adapt, and evolve in response to new information and changing environments. One crucial element in creating ...

by Jenna Knoblauch
on May 08, 2023

Emerging threats that evade traditional defenses, credential theft, and business email compromise payment scams are on the rise

Jeff Rezabek
by Jeff Rezabek
on May 04, 2023

AI is eating the world. That may be extreme, but you can't scroll through your LinkedIn feed without seeing tips for using AI to accomplish a task or read an AI-generated post. The truth of it is AI ...

by Jenna Knoblauch
on April 28, 2023

IRONSCALES is sweeping the cybersecurity awards scene this Spring! As the leading enterprise email security provider, IRONSCALES has racked up an impressive number of accolades in recent months. With ...

by Jenna Knoblauch
on April 26, 2023

Are you looking for a powerful email security solution to help protect your organization from advanced phishing threats like BEC, ATO, and ransomware? We have exciting news—IRONSCALES has been ...

Jeff Rezabek
by Jeff Rezabek
on April 26, 2023

Phishing has been a constant threat in cybersecurity, and as technology evolves, so do the tactics employed by cybercriminals. Advanced phishing threats have become increasingly sophisticated, making ...

Jeff Rezabek
by Jeff Rezabek
on April 20, 2023

RSA Conference is right around the corner, and we are thrilled to be attending this year's event. If you're attending RSAC in San Francisco, stop by booth 5215 to discuss email security and our ...

Audian Paxson
by Audian Paxson
on April 19, 2023

Let’s get straight to the point, email-based attacks present a serious security threat for organizations today, especially enterprises. In 2022, Verizon’s Data Breach Investigations Report found that ...

Jeff Rezabek
by Jeff Rezabek
on April 13, 2023

Email is a primary method of business communication—making it also one of the most exploited attack vectors for cybercriminals. With the rise of Business Email Compromise (BEC) attacks, it's becoming ...

Audian Paxson
by Audian Paxson
on April 05, 2023

With all the recent focus on education and prevention of business email compromise (BEC) attacks, have the numbers gone down? Nope. In fact, the number of BEC attacks is significantly rising.

Audian Paxson
by Audian Paxson
on March 30, 2023

We’ve been writing a lot about Business Email Compromise (BEC) attacks lately (six blogs and one research whitepaper since Jan 1st). So, I thought it would be good to provide some historical context.

Jeff Rezabek
by Jeff Rezabek
on March 30, 2023

Attackers regularly leverage email to launch their attacks on the enterprise. With new tactics and technologies to exploit vulnerabilities, like launching Business Email Compromise (BEC) attacks, ...

Audian Paxson
by Audian Paxson
on March 22, 2023

“Large organizations (with 10,000 or more employees) anticipate a 43.3% increase in the threat of BEC attacks in the next 12 months.” That’s just one of the many interesting data points from the new ...

Audian Paxson
by Audian Paxson
on March 16, 2023

Attackers never stop looking for new ways to target individuals and defraud organizations. And the recent collapse of Silicon Valley Bank (SVB) and Signature Bank has provided cyber criminals a ripe ...

Audian Paxson
by Audian Paxson
on March 09, 2023

What is BEC Payroll Diversion? Payroll diversion is a type of business email compromise (BEC) attack that occurs when a scammer successfully manipulates payroll credentials in order to defer direct ...

Jeff Rezabek
by Jeff Rezabek
on March 06, 2023

Last month, Gartner published their findings and recommendations from 1,500+ customer interactions in the 2023 Gartner Market Guide for Email Security. The bad news is that despite the technology in ...

Eyal Benishti
by Eyal Benishti
on February 28, 2023

Phishing and BEC attacks are serious threats to any organization and have become increasingly common in recent years. These attacks can have severe consequences for organizations, including financial ...

Jeff Rezabek
by Jeff Rezabek
on February 24, 2023

While 90% of all cyber breaches originate from phishing emails, traditional anti-phishing solutions have done a poor job of preventing advanced attacks. Cybercriminals have evolved tactics and ...

IRONSCALES
by IRONSCALES
on February 22, 2023

The IRONSCALES team is thrilled to announce a new strategic partnership with Yellow Cube — our new Central and Eastern European (CEE) Value-Added Distributor (VAD). Operating across 22 countries in ...

Eyal Benishti
by Eyal Benishti
on February 14, 2023

GPT-3 has been around for over a year now but didn’t start gaining popularity until ChatGPT coupled it with Reinforcement Learning from Human Feedback (RLHF). RLHF is a machine-learning technique ...

Jeff Rezabek
by Jeff Rezabek
on February 10, 2023

The phishing problem isn’t going away anytime soon. In reality, it’s getting worse as attackers adopt new tools and strategies to bypass traditional tools and coax their victims into responding to ...

Themis
by Themis
on February 03, 2023

This past year, IRONSCALES made the strategic decision to go all-in on a channel-first sales model — fueled by the belief that through mutual success with our strategic partners, we will be better ...

Audian Paxson
by Audian Paxson
on February 01, 2023

ChatGPT is a powerful machine learning-based text generation tool that can generate highly sophisticated and realistic text, making it a dangerous tool for criminals writing phishing emails. The ...

Jeff Rezabek
by Jeff Rezabek
on January 26, 2023

State and local government agencies store, utilize, and send massive amounts of sensitive information on a daily basis. When handling data such as personal and financial records and other significant ...

Themis
by Themis
on January 25, 2023

As we look ahead to 2023, it's clear that artificial intelligence (AI) will continue to shape the cybersecurity landscape, especially when it comes to phishing. Advancements in AI technology, such as ...

Audian Paxson
by Audian Paxson
on January 18, 2023

The CFO’s role in cybersecurity is often overlooked. Yet, they can be a vital partner with a CISO in risk management to protect the financial security of an organization and maximize return on ...

Jeff Rezabek
by Jeff Rezabek
on January 10, 2023

Phishing simulation campaigns are vital for businesses to test their employee's security awareness and ability to help protect against cyber threats. As cyber threats become more sophisticated and ...

Eyal Benishti
by Eyal Benishti
on January 06, 2023

The cybersecurity industry has been talking about collaborative approaches forever. In fact, the cyber community has been using a collaborative approach for a long time on things like the ...

Jeff Rezabek
by Jeff Rezabek
on December 20, 2022

Phishing attacks are surging. As a result, threat actors are quickly evolving their tactics to bypass legacy systems and deceive vulnerable targets, causing IT and Security teams to spend more time ...

Eyal Benishti
by Eyal Benishti
on December 15, 2022

BEC, or Business Email Compromise, is a type of cybercrime that has become increasingly common in recent years. It involves hackers sending emails that appear to be from trusted sources, such as ...

Eyal Benishti
by Eyal Benishti
on December 13, 2022

This post was originally published on December 03, 2020, and has since been updated for relevancy and accuracy. ‘Tis the season for cybercriminals to launch email phishing scams as they seek to take ...

Audian Paxson
by Audian Paxson
on December 08, 2022

Threat actors constantly tweak and refine their tactics in an attempt to evade detection or become more efficient at achieving malicious goals. Often, these tactical adjustments exploit societal ...

by Product Management Team
on November 30, 2022

We're pleased to announce the following improvements and new features included in the v60.00.00 release of IRONSCALES. Check them out below.

Jeff Rezabek
by Jeff Rezabek
on November 29, 2022

It’s well known that a good security strategy calls for layers of protection to thwart bad actors from quickly accessing sensitive data. While many organizations have a secure email gateway deployed ...

Eyal Benishti
by Eyal Benishti
on November 17, 2022

Sometimes I hear the following from security professionals when we talk about their awareness program:

Jeff Rezabek
by Jeff Rezabek
on November 17, 2022

Cybercriminals have relied on phishing emails as a gateway to gaining access to sensitive information since the beginning of email. And reports indicate that this isn’t slowing down. For threat ...

Audian Paxson
by Audian Paxson
on November 10, 2022

Earlier this year, we launched IRONSCALES™ Starter™, our free email security software solution. And since then, it has become a very popular option with IT security admins who need to deliver ...

Audian Paxson
by Audian Paxson
on November 09, 2022

Almost every business or organization is a target for account takeover (ATO) attempts. There’s a good chance that your organization is vulnerable.

IRONSCALES
by IRONSCALES
on November 08, 2022

We recently published a report named “The Business Cost of Phishing” that provides insights into the challenges faced by IT and Security teams in their fight against this highly prevalent type of ...

Eyal Benishti
by Eyal Benishti
on November 08, 2022

For good and bad, AI is now more accessible and used for things from writing articles to identifying phishing threats. For anti-phishing, AI accessibility is beneficial for building better cyber ...

David Vuijsje
by David Vuijsje
on October 27, 2022

It may be wrong to admit, but I love a good con. It is the art of deception that fascinates me the most. Watching a con artist at work is enthralling and fills me with a mix of surprise at their ...

Eyal Benishti
by Eyal Benishti
on October 19, 2022

Defense in depth is a common practice in both the physical and the cyber security realms. We create multiple layers to complement each other; each layer assumes its predecessor failed.

Eyal Benishti
by Eyal Benishti
on October 12, 2022

The Artificial Intelligence (AI) vs. Human Insights (HI) debate has been discussed a lot in the past few years. There is no doubt that AI can outperform humans in specific areas and even beat the ...

Themis
by Themis
on October 11, 2022

The 2022 Uber Breach: Social Engineering and the Lapsus$ Gang A cyber-attack on ride-hailing company Uber made global media headlines in September 2022 when a threat actor infiltrated the company’s ...

Jeff Rezabek
by Jeff Rezabek
on September 23, 2022

Cybersecurity Awareness month is right around the corner. As such, you may be assessing your business’s risk profile to identify weaknesses and targets. With phishing attacks being a leading cause of ...

Tyler Swinehart
by Tyler Swinehart
on September 20, 2022

URL Rewriting, a service used to sandbox and defang malicious URLs by sending users to a portal that displays the URL in the sandboxed environment, has many well-known weaknesses and a few that may ...

IRONSCALES
by IRONSCALES
on September 15, 2022

In 2022, a large-scale phishing campaign successfully compromised IT resources at over 130 organizations, many of which were high-profile companies. Code-named 0ktapus, the threat group behind this ...

Audian Paxson
by Audian Paxson
on September 14, 2022

A researcher at IRONSCALES recently discovered thousands of business email credentials stored on multiple web servers used by attackers to host spoofed Microsoft Office 365 login pages. The ...

Audian Paxson
by Audian Paxson
on September 08, 2022

Account takeover (ATO) attacks involve threat actors gaining access to and control over legitimate user accounts. After taking control of a user’s account, the malicious actor then uses the account’s ...

IRONSCALES
by IRONSCALES
on September 01, 2022

Evil Corp is a cybercrime gang notorious for its prolific malware-based hacking schemes leading to payments exceeding $100 million from various financial institutions and other businesses. The ...

Jeff Rezabek
by Jeff Rezabek
on August 26, 2022

When it comes to email security, no amount of technology can completely stop the threat of phishing attacks. As the threat landscape evolves and cybercriminals identify new methods to breakthrough ...

Eyal Benishti
by Eyal Benishti
on August 17, 2022

Cyber security is a tough challenge, and it's getting harder to keep up with the latest threats. AI-powered tools leveraging machine learning can help detect phishing attacks by analyzing huge ...

by Kaylyn Beverly
on August 15, 2022

For organizations dealing with phishing attacks, it may seem like an easy solution to stopping the attacks is just to block the attacker. Turns out that isn’t the case. Let’s look at why this ...

David Vuijsje
by David Vuijsje
on August 11, 2022

Every family has its IT guy, ours is Raphael and he is great at it. Embracing this position within the family he married into, Raph faithfully keeps us updated on WhatsApp with interesting articles ...

by Product Management Team
on August 10, 2022

With the v55.00.00 release of IRONSCALES, we are pleased to announce the following product improvements and new features:

Audian Paxson
by Audian Paxson
on August 09, 2022

Many people don’t know that IRONSCALES started as a Security Awareness Training company. While working as a security researcher at a technology company, Eyal Benishti (our founder & CEO) had a ...

by Alex Paquette and Landon Saunders
on August 03, 2022

At IRONSCALES we work hard every day to provide our customers with the very best experience possible, the foundation of which is our amazing Customer Success team. As a data-driven organization, we ...

IRONSCALES
by IRONSCALES
on August 02, 2022

While several high-profile ransomware gangs saw a steep rise and an equally sharp decline over the last couple of years, Cuba ransomware somewhat slipped under the radar. With the gang behind Cuba ...

IRONSCALES
by IRONSCALES
on July 21, 2022

The email security market is full of vendors offering a wide array of features and capabilities. To make sense of the chaos and to bring clarity to companies seeking the right solution for their ...

Russell McGuire
by Russell McGuire
on July 19, 2022

It has been six weeks since I joined IRONSCALES, and WOW...what a ride!

IRONSCALES
by IRONSCALES
on July 12, 2022

Cryptocurrency is a digital medium of exchange that is not associated with traditional currency-issuing institutions like national banks. Instead, cryptocurrency is managed using blockchain ...

IRONSCALES
by IRONSCALES
on July 07, 2022

After a cull that saw several high-profile ransomware gangs disbanded in late 2021 a new set of groups emerged in their place. One gang with a particularly rapid rise over the last few months in ...

Audian Paxson
by Audian Paxson
on July 01, 2022

OpenSea, the largest non-fungible token (NFT) marketplace, disclosed a breach on their blog on June 29, stating that an employee of Customer.io, their email delivery vendor “misused their employee ...

IRONSCALES
by IRONSCALES
on June 30, 2022

What Is Smishing? Smishing is a type of social engineering scam that uses mobile texting rather than emails to deliver nefarious messages that dupe people into taking specific actions. The term is a ...

IRONSCALES
by IRONSCALES
on June 14, 2022

What is Business Email Compromise? Business email compromise (BEC) is a type of targeted phishing (spear phishing) in which a threat actor either accesses or mimics a genuine business email account ...

IRONSCALES
by IRONSCALES
on June 14, 2022

EMOTET malware is a banking trojan that was initially spotted in 2014, disappeared for a while, and then reappeared in 2018. EMOTET is typically spread through phishing emails with malicious ...

by Avi Kassuto
on June 01, 2022

The World Cup Ticketing Scam If you're one of the estimated 3 million football/soccer fans looking to buy tickets to this year’s FIFA World Cup, beware of fake emails like the one below. There have ...

IRONSCALES
by IRONSCALES
on April 29, 2022

Higher education institutions are prime targets for ransomware attacks. Universities and colleges handle large amounts of sensitive personal data, facilitate a campus-wide intranet, and manage ...

by Azfar Makani
on April 05, 2022

Collaboration tools like Microsoft Teams are now a big part of everyday working life – we use these tools constantly to communicate with employees across our organization. Here are just a few data ...

David Vuijsje
by David Vuijsje
on April 04, 2022

I was first exposed to the idea of micro-expressions by Lie to Me, a crime series inspired by the work of Paul Ekman, professor emeritus at UCSF and advisor to law enforcement. By analyzing ...

IRONSCALES
by IRONSCALES
on April 01, 2022

The ongoing conflict between Russia and Ukraine poses cyber threats that extend beyond Ukraine’s borders across the entire EMEA region. Cyber attacks are a significant part of Russia’s military ...

Eyal Benishti
by Eyal Benishti
on March 25, 2022

Phishing remains the leading cause of ransomware attacks and shows no signs of slowing down. Leading MSPs around the globe recognize this issue and are constantly on the lookout for email security ...

Audian Paxson
by Audian Paxson
on March 15, 2022

One of the exciting updates included in our recent Megalaunch announcement was enhanced account takeover (ATO) detection and remediation. Before we highlight the updates, let’s do a quick overview of ...

Eyal Benishti
by Eyal Benishti
on March 01, 2022

We are excited to share the news that our biggest launch ever at IRONSCALES, which we’re calling Megalaunch, is here! With this launch, we are rolling out new packages, introducing new capabilities, ...

Themis
by Themis
on February 25, 2022

Being prepared for the latest email security and phishing threats requires anticipating what’s on the horizon over the next year or so. Part one of this series of predictions covered the possible ...

Themis
by Themis
on February 16, 2022

In the dynamic world of cybersecurity, things change quickly and often—email security and phishing are no exceptions. Each 12-month period sees a range of new tactics, tools, and methods employed by ...

Or Malzman
by Or Malzman
on February 08, 2022

Analysis of Microsoft O365 Credential Phishing with Employee Manual Updates Attack Summary Details Impacted IRONSCALES customer mailboxes: 506 Impacted IRONSCALES customers: 269 Security Bypass: SPF, ...

IRONSCALES
by IRONSCALES
on February 02, 2022

International law enforcement collaboration led to the disbandment of several high-profile ransomware gangs in the last 12 months. As ransomware attacks gained more media coverage and wreaked more ...

IRONSCALES
by IRONSCALES
on January 27, 2022

Ransomware attacks continue to be a problem for companies around the world. As these attacks surge, many high-profile incidents have made headlines across Africa. This article highlights some of the ...

IRONSCALES
by IRONSCALES
on January 25, 2022

FIN7 is a unique group in the shady world of cybercrime. Infamous for sophisticated stolen credit and debit card hacks involving phishing emails and other social engineering methods, the gang’s ...

IRONSCALES
by IRONSCALES
on January 18, 2022

Netwalker is a notorious name on the ransomware scene with a prolific record of successful attacks. An estimated $25 million in ransom extortions between March and September 2020 established the gang ...

J Stephen Kowski
by J Stephen Kowski
on January 14, 2022

Separating Fact from Fiction “Yeah, I get it, but I just don't trust users; they always screw everything up,” lamented the Director of IT, while on a recent sales call featuring our dynamic ...

IRONSCALES
by IRONSCALES
on January 04, 2022

2021 was a big year for cybersecurity — and not in a good way.

Alex Paquette
by Alex Paquette
on December 21, 2021

As we approach the end of the year, IRONSCALES would like to say THANK YOU to each and every one of our customers. Together, we are paving the best-in-class, modern approach to email security. Your ...

IRONSCALES
by IRONSCALES
on December 10, 2021

Ragnarok is a ransomware gang known for the Ragnar Locker ransomware, which has impacted a range of high-profile organizations from video game developers to energy companies. This article looks at ...

Eyal Benishti
by Eyal Benishti
on December 07, 2021

I am excited to announce our Series C investment of $64M, led by PSG, a leading growth equity firm partnering with software and technology-enabled service companies, with participation from existing ...

IRONSCALES
by IRONSCALES
on December 03, 2021

Babuk is a new ransomware gang that emerged in early 2021. The gang’s initial mission statement referenced a non-malicious intent to conduct ransomware attacks as an apparent audit of the security of ...

IRONSCALES
by IRONSCALES
on November 17, 2021

DoppelPaymer is a ransomware gang that extracts data from victims’ systems and then encrypts those same systems. Named after the strain of ransomware that the gang deploys, DoppelPaymer has ...

Or Malzman
by Or Malzman
on November 14, 2021

Hackers can use their abilities to do good, to do bad and sometimes just to show what they can do. The last option was the case for this scenario.

IRONSCALES
by IRONSCALES
on November 09, 2021

Egregor is a ransomware-as-a-service gang that has so far managed to claim at least 70 victims and extort tens of millions of dollars during a prolific yet short spell of operations. The Egregor ...

IRONSCALES
by IRONSCALES
on November 02, 2021

Clop is a ransomware gang that first appeared in February 2019 when security researchers found new ransomware strains with the .Cl0p extension. A spate of prolific and high-profile attacks within a ...

IRONSCALES
by IRONSCALES
on October 27, 2021

DarkSide is a ransomware gang that quickly made waves in the cybersecurity world with a range of high-profile attacks. After first notifying the world of their operations in an August 2020 dark web ...

IRONSCALES
by IRONSCALES
on October 20, 2021

Secure Email Gateways (SEGs) have been around for two decades. They were built to provide security for on-premises email deployments and were placed at the perimeter of a company’s security ...

IRONSCALES
by IRONSCALES
on October 19, 2021

Conti is a ransomware gang that has managed to wreak havoc on many organizations within just a short time. After first appearing in media headlines as recently as 2019, Conti has been behind several ...

IRONSCALES
by IRONSCALES
on October 15, 2021

Email Phishing is Biggest Security Threat To Businesses, According to IT Professionals

Eyal Benishti
by Eyal Benishti
on October 14, 2021

Fostering channel partnerships with reputable value-added resellers (VARs) has become an important component of most cybersecurity companies' go-to-market strategies. Challenged by what seems like ...

Noah Gordon
by Noah Gordon
on October 14, 2021

Background The IRONSCALES research team has recently identified a social engineering phishing scam that leverages confusion and disinformation about people and corporate COVID vaccine requirements to ...

Eyal Benishti
by Eyal Benishti
on October 13, 2021

Google’s Gmail for Business has had an overhaul and now claims to offer AI-powered security features. According to its marketing materials, it will now offer advanced protection against phishing and ...

IRONSCALES
by IRONSCALES
on October 13, 2021

REvil is a notorious ransomware gang responsible for multiple high-profile cyber attacks targeting companies of all sizes. This article explores REvil’s origins, the types of malware payloads used by ...

IRONSCALES
by IRONSCALES
on October 12, 2021

“Rollin' in my 5.0. With my rag-top down so my hair can blow.”

IRONSCALES
by IRONSCALES
on October 05, 2021

Ransomware in Pharmaceutical Overview The pharmaceutical industry is comprised of public and private organizations focused on the research, development and manufacturing of drugs and medication. The ...

J Stephen Kowski
by J Stephen Kowski
on September 23, 2021

“I know I hear you talk about this all the time, but what is ransomware exactly?” my wife asked as we watched the evening news. Apart from being a great question, it’s one that a lot of folks have ...

IRONSCALES
by IRONSCALES
on September 22, 2021

Meeting the demands of modern digital-oriented customers has resulted in widespread digital transformation initiatives in the financial services industry. The new digital ecosystem harnesses ...

IRONSCALES
by IRONSCALES
on September 21, 2021

The mining industry encompasses organizations focused on the exploration for and extraction of valuable minerals and other elements from the Earth. Given the critical need to provide these minerals ...

IRONSCALES
by IRONSCALES
on September 21, 2021

From cloud backup to consulting to managed detection and response, businesses of all sizes leverage a number of IT services. These services add value to organizations through cost-effective ...

IRONSCALES
by IRONSCALES
on September 20, 2021

The agriculture industry spans a diverse range of businesses from growing crops, raising animals, and harvesting fish and other animals from a farm, ranch, or their natural habitats. Given the ...

IRONSCALES
by IRONSCALES
on September 17, 2021

Phishing remains the leading cause of ransomware attacks and shows no signs of slowing down. Leading MSPs around the globe recognize this issue and are constantly on the lookout for email security ...

IRONSCALES
by IRONSCALES
on September 14, 2021

The media and entertainment industry spans a diverse range of businesses from newspaper publishers to television broadcasters. Common to most business models within media and entertainment is a high ...

IRONSCALES
by IRONSCALES
on September 03, 2021

Telecommunications providers keep the world connected through phone calls, emails, the Internet, and television. It’s easy to take telecommunications services for granted until they suffer ...

IRONSCALES
by IRONSCALES
on September 02, 2021

Ransomware attacks pose serious cybersecurity risks for companies in the hospitality industry, which is a broad sector that includes hotels, tourism agencies, restaurants, and bars. Common to these ...

IRONSCALES
by IRONSCALES
on August 20, 2021

Ransomware attacks pose serious cybersecurity risks for retailers. If an attack manages to disrupt customer-facing operations during peak business periods, it could have a disastrous effect on a ...

IRONSCALES
by IRONSCALES
on August 12, 2021

Businesses in the energy sector produce, extract, sell, and supply various sources of energy. These energy sources include oil and gas reserves, nuclear energy, and renewable energy for fuel and to ...

Noah Gordon
by Noah Gordon
on August 11, 2021

Attack Summary Attack Description: FileShare Platform Credential Theft Impacted Mailboxes: 210 Number of Impacted Customers: 42 Security Bypass: SPF, DMARC, Third-Party Visual Scanners Payload: ...

Or Malzman
by Or Malzman
on August 05, 2021

Background The IRONSCALES research team has recently noticed an alarming increase in the exploitation of legitimate file sharing services to deliver phishing attacks. Specifically, we are seeing ...

IRONSCALES
by IRONSCALES
on July 29, 2021

Transportation companies provide critical functions in shipping products and carrying people to their destinations. Encompassing both transport and logistics companies, the transportation sector is ...

IRONSCALES
by IRONSCALES
on July 22, 2021

Organizations in the Legal industry, such as law firms, rely on IT for many of their critical operations. The very nature of this industry makes them prime candidates for ransomware attacks. Law ...

Or Malzman
by Or Malzman
on July 21, 2021

What is CLOP ransomware group? CLOP is a notorious high-profile ransomware group that has compromised industries globally. Like other ransomware groups, CLOP hosts a leak site to pressure their ...

IRONSCALES
by IRONSCALES
on July 19, 2021

Disrupting operations at manufacturing plants is a potentially lucrative path for threat actors specializing in ransomware. This article discusses the current state of ransomware in the manufacturing ...

Or Malzman
by Or Malzman
on July 15, 2021

What Is an eFax Message? eFax is an online service that allows users to send and receive faxes directly via email. Unfortunately, cybercriminals are known to target services like eFax that leverage ...

J Stephen Kowski
by J Stephen Kowski
on July 14, 2021

The 2021 Verizon Data Breach Investigations Report (DBIR) provides an analysis of information security incidents, with a specific focus on data breaches, which it defines as an incident that results ...

IRONSCALES
by IRONSCALES
on July 08, 2021

The sensitive nature of information gathered about patients makes healthcare organizations particularly vulnerable to ransomware attacks. Seeking a large payday, opportunistic hacking groups target ...

David Habusha
by David Habusha
on July 07, 2021

This week I joined IRONSCALES as the SVP of Product Management. Given my background in cybersecurity and enterprise software, I always thought of email security and phishing as a problem that was ...

IRONSCALES
by IRONSCALES
on June 24, 2021

Countries in East and Southeast Asia have been targeted with multiple high-profile ransomware attacks over the last 18 months. The attacks have hit companies of all sizes across a disparate range of ...

Noah Gordon
by Noah Gordon
on June 21, 2021

Introduction The cryptocurrency market has grown exponentially in recent years, with the total market capitalization of cryptocurrencies surpassing $200 billion. This rapid growth has caught the ...

J Stephen Kowski
by J Stephen Kowski
on June 20, 2021

At its core, your email security team has one simple goal: protect company emails from compromise. The solution they choose to meet that end often involves a patchwork of monitoring, data collection, ...

IRONSCALES
by IRONSCALES
on June 17, 2021

Being geographically quite isolated from the rest of the world does not mean anything when it comes to avoiding the widespread threat of ransomware. Operations at organizations across Australia and ...

Noah Gordon
by Noah Gordon
on June 16, 2021

Background The cryptocurrency market has been around for many years but gained a significant amount of interest during the pandemic. Naturally, the criminals followed, as they are always on the ...

Julia Blachman
by Julia Blachman
on June 16, 2021

I just joined IRONSCALES two weeks ago. Yes, you read that correctly: I have only been here for a few days and am already writing a blog about the inclusive workplace! Why? Because I get to be an ...

IRONSCALES
by IRONSCALES
on June 14, 2021

Vast wealth from natural resources, dynamic regional politics and a significant investment in technology have resulted in the Middle East becoming a fertile ground for ransomware and other types of ...

Eyal Benishti
by Eyal Benishti
on June 11, 2021

Malicious cyber activity goes far beyond email security, with some estimates putting the cost to the U.S. economy between $57 billion and $109 billion in 2016 alone. The potential impact on the ...

IRONSCALES
by IRONSCALES
on June 09, 2021

Composed of South America, Mexico, Central America, and some Caribbean islands, Latin America is a large geographic area with a flourishing IT sector. Improved English proficiency, educational ...

Noah Gordon
by Noah Gordon
on June 06, 2021

The pandemic has reshaped the world in many ways, from how we work and how we shop. As their workforces went remote, companies rushed to move their applications to the cloud. As lockdowns forced ...

Alex Paquette
by Alex Paquette
on June 06, 2021

Many organizations love the comfort that comes with Secure Email Gateways (SEGs) rewriting URLs contained within an email, otherwise known as “safe links”. But is this perceived comfort actually ...

IRONSCALES
by IRONSCALES
on June 03, 2021

The IT sector in India continues to experience strong growth, powered by digital transformation initiatives across all industries. As a result, many Indian companies recognize the need to invest in ...

IRONSCALES
by IRONSCALES
on May 27, 2021

Cyber attacks targeting countries like the UK, United States, and Australia tend to receive the majority of media attention. However, large swaths of attacks continue to hit other parts of the world, ...

IRONSCALES
by IRONSCALES
on May 25, 2021

2021 has proven to be an exciting year for us at IRONSCALES! We continue to work hard every single day to provide our customers with the best email security solution on the market. While our focus ...

IRONSCALES
by IRONSCALES
on May 25, 2021

Earlier this month we announced that we were relaunching our Channel Partner Program with enhanced benefits. As part of the refresh, we refined our tiering structure to feature platinum, gold, ...

IRONSCALES
by IRONSCALES
on May 19, 2021

Ransomware attacks continue to wreak havoc on the IT systems of organizations, enterprises, small businesses, and even government services around the world. A rapid and unexpected shift to ...

Eyal Benishti
by Eyal Benishti
on May 13, 2021

If you’re concerned that your security team may be suffering from fatigue, lacking motivation, or feeling overwhelmed… you’re not wrong. The industry is facing a dearth of qualified cybersecurity ...

Eyal Benishti
by Eyal Benishti
on April 28, 2021

Email remains the most significant cyber security threat companies face today, which is reflected in a burst of recent M&A activity in this space. Both email security and related security ...

Shapes-Left

Subscribe to our blog:

IRONSCALES needs the contact information you provide to us to contact you about our products and services. You may unsubscribe from these communications at any time. For information on how to unsubscribe, as well as our privacy practices and commitment to protecting your privacy, please review our Privacy Policy.

Shapes-Right