Blog
Filter
Browse by Year or Category
Spoofing,
IRONSCALES Attack Research,
Account Takeover,
2022

Vendor Spoof Attack Exposes Business Email Credentials

By Audian Paxson
on September 14, 2022
A researcher at IRONSCALES recently discovered thousands of business email credentials stored on multiple web servers used by attackers to host spoofed Microsoft Office 365 login pages. The ...
Read More
Phishing,
Spoofing,
Impersonation,
Email Security,
Credential Theft,
CEO fraud,
AI,
2022

5 Email Security and Phishing Predictions for 2022 (Part 1)

By Themis
on February 16, 2022
In the dynamic world of cybersecurity, things change quickly and often—email security and phishing are no exceptions. Each 12-month period sees a range of new tactics, tools, and methods employed by ...
Read More
Phishing,
Spoofing,
Credential Theft,
2022

Employee Manual Updates for Credential Theft

By Or Malzman
on February 08, 2022
Analysis of Microsoft O365 Credential Phishing with Employee Manual Updates Attack Summary Details  Impacted IRONSCALES customer mailboxes: 506  Impacted IRONSCALES customers: 269  Security Bypass: ...
Read More
Spoofing,
Impersonation,
Email Security,
Anti Phishing,
CEO fraud,
2021

Google’s Gmail for Business Offers High False Positives as Standard

By Eyal Benishti
on October 13, 2021
Google’s Gmail for Business has had an overhaul and now claims to offer AI-powered security features. According to its marketing materials, it will now offer advanced protection against phishing and ...
Read More
Spoofing,
DMARC,
SPF,
2020

Understanding DMARC Part 2: How the Protocol’s Limitations Maintain Elevated Risk

By Eyal Benishti
on December 29, 2020
In our last blog post we discussed the hype around Domain-based Message Authentication, Reporting & Conformance (DMARC), the upcoming deadline for compliance to DHS’ Binding Operational Directive ...
Read More
Spoofing,
2020

Microsoft O365 Fails to Block Spoofed Emails Sent from Microsoft.com

By Lomy Ovadia
on December 07, 2020
The 200 million Microsoft Office 365 (O365) users worldwide are now being targeted by a new global spear-phishing attack spoofing Microsoft.com. Two weeks ago, IRONSCALES researchers first identified ...
Read More
Phishing,
Spoofing,
2020

Phishing Attacks Spoofing PBX Integrations

By Eyal Benishti
on June 04, 2020
With workforces largely remaining partially or fully remote, employees continue to rely on tools for greater efficiency and productivity. While we all know that software like Slack and Zoom have ...
Read More
Spoofing,
Impersonation,
Anti Phishing,
Incident Response,
CEO fraud,
2018

DMARC Hasn't Stopped HMRC Being Spoofed

By Eyal Benishti
on April 26, 2018
In April [2018], the UK’s National Cyber Security Centre (NCSC) published its Active Cyber Defence (ACD) Programme which urged companies to employ the Domain-based message authentication, reporting ...
Read More
Phishing,
Spoofing,
Impersonation,
Anti Phishing,
2018

BEC Attack Bypassed Gmail’s Anti-Phishing SPF Security - Again

By Eyal Benishti
on April 12, 2018
Business Email Compromise attacks (BECs) have been causing organizations problems for years, with the problem getting worse. The reason they’re so difficult to deflect is that, unlike typical email ...
Read More
Spoofing,
Whaling,
CEO fraud,
2018

Why Email Security Must Move from the Gateway to the Mailbox

By Eyal Benishti
on March 12, 2018
The Rise of Business Email Compromise (BEC): Did you know that, according to Aberdeen, within 80 seconds of a phishing message arriving in an organization, someone has interacted with the message, ...
Read More
All posts
Shapes-Left

Join thousands of your peers! Subscribe to our blog.

Ironscales needs the contact information you provide to us to contact you about our products and services. You may unsubscribe from these communications at any time. For information on how to unsubscribe, as well as our privacy practices and commitment to protecting your privacy, please review our Privacy Policy.

Shapes-Right