BladesDynamicDemoBlade

Dark reading logo

News

Health it security logo

Bank info security logo

A spear-phishing campaign detected earlier this month that uses messages that appear to originate with legitimate companies is targeting enterprise users in an effort to steal Microsoft Office 365 credentials, according to a report from Abnormal Security. The fraudsters appear to have compromised hundreds of legitimate accounts to help craft realistic-looking emails, the researchers say.

Recent Spear-Phishing Attacks Originate From Legit Accounts

Recent spear-phishing campaigns are again targeting Microsoft Office 365 users in an effort to steal user credentials, while one campaign spoofs Microsoft Exchange Online Protection (EOP), according to recent reports from IRONSCALES and Abnormal Security. Nearly 200 million O365 users across the globe and particularly in the healthcare, insurance, financial services, manufacturing, utilities, and telecom sector.

Phishing Campaigns Targeting Office 365 Credentials, Spoofing Exchange

Info security magazine logo

A recently uncovered phishing campaign is spoofing messages from the New York State Department of Labor, claiming to offer $600 as part of a COVID-19 relief program, according to researchers at Abnormal Security. The goal is to harvest personally identifiable information.

Phishing Email Campaign Uses Updated COVID-19 Theme

Scammers are impersonating New York State's Department of Labor to steal personal information from state residents seeking to claim money from a COVID relief fund. Targets are sent an email bearing the state logo that appears to come from “noreply@labor.ny.gov.” The email states that by activating their account, the recipient will receive $600 in pandemic aid.

Phishers Spoof New York Department of Labor

Homepage

Breadcrumbs

Abnormal AI provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal AI

A new scam using an IRS form as its mechanism has been found targeting users of Google's G Suite, with as many as 50,000 executives and "important" employees affected so far. The campaign, discovered and reported by researchers at Abnormal Security, claims to contain an IRS W-8BEN form in PDF format.

New IRS Form Fraud Campaign Targets G Suite Users

A new scam using an IRS form as its mechanism has been found targeting users of Google's G Suite, with as many as 50,000 executives and "important"…

description

form, mechanism, w-8ben, using, targeting, users, google's, suite, 50,000, executives, important, reported, researchers, abnormal, security

keywords

https://images.abnormalsecurity.com/production/images/press/dark-reading-logo.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1631719960&s=9637c74c23b64baceeed68e680b62c97

https://abnormal.ai/about/news/new-irs-form-fraud-campaign-targets-g-suite-users

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/press/dark-reading-logo.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1631719960&s=6daecc8d80c117131e021afc4b60d90f

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"New IRS Form Fraud Campaign Targets G Suite Users | Abnormal AI"}}

Demo

Schedule a Demo

AI's Role in Cyber Defense

CNBC Disruptor 50: Abnormal Security

Generative AI Could Revolutionize Email—for Hackers

Ones to Watch in Tech

Email Subscribe

<p>Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.</p>

Newsroom

Introducing Abnormal’s Biggest Product Release Yet

<p>Announcing Our Biggest Product Release Yet</p>

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

EmbeddedVideo

EyebrowText

Footer

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

date-fns

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Legal

Abnormal Why Abnormal

Abnormal Landing Pages

react-aria

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

Gartner mq 4x

Analyst Research

Gartner names Abnormal a Leader in Email Security Platforms, placed furthest for Completeness of Vision.

Abnormal Named a Leader in 2024 Gartner® Magic Quadrant™

Email Security

B 1500x1500 MKT856 Aimpoint report 1

White Papers

Discover how replacing your SEG with Abnormal’s behavioral AI boosts protection, cuts costs, and reduces manual work—backed by real customer results.

The Unexpected Benefits of Replacing a Secure Email Gateway with Abnormal AI

Abnormal Platform

B 1500x1500 Aim Point SAT Awareness Survey Report

Discover why traditional SAT programs are falling short and how modern, AI-enhanced approaches reduce human risk and improve your security posture.

2025 State of Security Awareness Training

B Inside the AI Arms Race Malicious AI WP

Discover how attackers are abusing trusted AI tools and using malicious GPTs to scale cybercrime—and how to stay ahead of the threat.

Inside the AI Arms Race: How Cybercriminals Exploit Trusted Tools and Malicious GPTs

Generative AI

B H1 2025 Email Threat Report

Threat Reports

Learn how the malicious use of AI is amplifying the impact of BEC, VEC, and phishing attacks in our latest threat report.

H1 2025 - Adversarial AI: Attacker Innovation Escalates Advanced Email Threats

New IRS Form Fraud Campaign Targets G Suite Users

See How Abnormal AI Protects Humans