Homepage

Breadcrumbs

Abnormal AI provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal AI

Abnormal AI provides advanced cloud email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal Attack Repository

description

security,privacy,email security,cloud email security,phishing protection

keywords

https://images.abnormalsecurity.com/production/images/blog/L_09.06.24_Attack-Category-page.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1726168346&s=27945d2ca5491c60a56530629d67adc1

https://abnormal.ai/repo/abnormal-attacks

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/blog/T_09.06.24_Attack-Category-page.png?w=1012&h=506&auto=compress%2Cformat&fit=crop&dm=1726168585&s=cd28c9e19289908e8374555c41e95280

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Abnormal Attack Repository | Abnormal AI"}}

Learn about advanced email attacks that are bypassing legacy tools and the next generation tools required to protect today’s email environments.

<p>Abnormal Named a Leader in Gartner® Magic Quadrant™ </p>

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

BladesDynamicHeroBlade

Button

Select

Pagination

ZDeprecatedButtonOldColors

PagePropsProvider

EntriesCardEntryGeneric

Overlay

BreadcrumbItem

ModalVideoPlasmic

EntriesFilteringEntryGeneric

BreadcrumbNavigation

Footer

OptionGroup

Option

RepoAbnormalAttacks

HeaderSpacing

SearchInput

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

date-fns

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

Abnormal Careers

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Privacy/Legal

Abnormal Why Abnormal

Abnormal Landing Pages

react-aria

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

Credential Phishing

Open redirect and click-tracking redirect bypassing SEGs.

Trusted Redirects, Deceptive Destinations

Phishing campaign delivering ScreenConnect bypassing traditional SEGs.

Trusted Deception: Fake Microsoft Teams Invitation leading to ScreenConnect

Exploiting trusted cloud platforms to bypass SEGs.

Trusted Deception: Vercel-Hosted Flask Kit Mimics DocuSign Notifications

A multi-layered redirect chain uses trusted infrastructure to bypass SEGs.

Forced Entry: Phishers Abuse Salesforce Sites

Financial lure leads to multi-stage AiTM phishing via Cloudflare workers.

Phishers at Work: Turning Serverless Functions into Phishing Proxies

Threat actors employ No-code platform to harvest credentials.

No-Code Phishing Lure Targets Universities

DKIM Replay and trusted platforms used to bypass SEGs.

Signed by Google, Weaponized by Attackers

Employee handbooks with QR Codes bypass SEGs.

Scan to Steal: QR Code Phish Masquerades as HR Benefits Update

Phishers abuse AWS app runner to host convincing login pages.

Webmail Wolves in Cloud Clothing

Financial lures imitate Box to steal logins and bypass SEGs.

Invitation To Bid Farewell Your Credentials

Scammers abuse GitHub issues and OAuth apps to bypass traditional SEGs.

Fake GitHub Security Alerts Exploit OAuth to Hijack Developer Accounts

Crafty phishing kit and Gamma AI platform used to evade SEGs.

Sneaky, Yet Effective: Gamma App Edition

Empty Docs, Real Threats: Using PandaDoc & Dropbox to Bypass SEGs

The PandaDoc Bait-and-Switch Scam

Tax Season Phishing With Fake Zoom Invites

Resume-Themed Lures Deliver Remcos RAT via Dropbox

Fake CVs, Real Threat

Evading SEGs by embedding MHT files inside of documents.

Hidden in Plain Sight – QR Code Phishing via Embedded MHT

By evading SEGs and users, ADFS phishing tactics Lead to compromised accounts.

ADFS Under Siege: How Attackers Bypass MFA for Account Takeover

Pivoting attack delivery to bypass users and SEGs, leading to ATO.

Adaptive Phishing: When Whimsical Fails, Lucid Strikes

Leveraging design collaboration platforms to bypass traditional SEGs.

Phishing by Design: Threat Actors Exploit Figma for Social Engineering

Business Email Compromise

Scams by Appointment: Exploiting Google Calendar Invites

Decoding the latest BEC tactic bypassing traditional SEGs.

Un-CODE-ing the Threat: How Punycode Powers the Latest BEC Attacks

Leveraging corrupted attachments to evade SEGs.

The Bait of Broken Files: Phishing Campaign Using Corrupted Word Docs

Financially themed Adobe documents evade traditional SEGs.

Creative Phishing in the Cloud: Threat Actors Leverage Adobe Services

C-suite impersonation used to extract sensitive financial information.

Executive Impersonation: The BEC Hunt for Customer Payment Records

Successful Account Takeover (ATO) leading to Lateral Phishing bypassing SEGs.

Drag-and-Drop-and-Deceive: Build Your Own Phishing Site

Leveraging Document Signature Service to Bypass Traditional SEGs

Signed and Compromised: Credential Phishing Through Legitimate DocuSign

Credential Phishing Documents Shared Through Zoom Bypass Traditional SEGs

Zooming In on Phishing: How Shared Documents Reel You In

Dynamic Phishing Interface Rendered Locally Bypassing Microsoft Defender O365

From Email to Telegram: HTML Smuggling in Action

Interactive images are being used to evade traditional SEGs by mimicking legitimate messages and sources.