Hackers are getting better at smuggling phishing emails past cybersecurity defenses

Date:
Tue, 03 Oct 2023 14:20:38 +0000

Description:
Good timing and solid technique are paying dividends for cybercriminals, new research claims.

FULL STORY ======================================================================

Hackers are getting better at smuggling phishing emails past cybersecurity defenses, thanks in to part to better obfuscation techniques and proper timing, new research has claimed.

The latest Phishing Threat Trends Report from Egress says the number of phishing emails employing obfuscation techniques is on the rise - and in
2023, jumped by almost a quarter (24.4%) and now sits at 55.2% in total.

Furthermore, almost half (47%) of such phishing emails use at least two obfuscation layers, with less than a third (31%) using only one. Among the different obfuscation techniques, HTML is the most popular one, being found
in 34% of samples. Hiding among greymail

By hiding the fact that these are phishing messages, email security providers can sometimes allow them to reach their final destination - the victims inbox - and thus put their endpoints at risk of a more damaging cyberattack.

But reaching the inbox is only half of the work - the victims must still interact with the contents of the phishing email. To make sure that happens, the attackers choose the perfect moment to strike - Wednesday and Friday.

Why those days? Because thats when most people receive most greymail - notifications, updates, and promotional messages. Benign, but numerous, and clogging the inbox. Busier inboxes, the researchers conclude, are more likely to be targeted by phishing.

Phishing emails havent changed much over the years. They usually impersonate
a popular brand, or an individual whom the victim knows. The message itself always carries a sense of urgency, claiming something catastrophic will
happen unless the victim acts immediately. While the topics may vary from returned shipping parcels to terminated bank accounts, the most popular
topic, Egress says, is missed voice messages.

This type of phishing attack accounted for 18.4% of all messages sent between January and September this year. More from TechRadar Pro Phishing scam pretends to be the Red Cross to trick victims into installing malware Here's
a list of the best firewalls today These are the best malware removal tools right now



======================================================================
Link to news story: https://www.techradar.com/pro/security/hackers-are-getting-better-at-smuggling -phishing-emails-past-cybersecurity-defenses


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)