Homepage

Breadcrumbs

Abnormal AI provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal AI

Abnormal AI provides advanced cloud email security to prevent credential phishing, business email compromise, account takeover, and more.

Threat Intelligence Blog

description

security,privacy,email security,cloud email security,phishing protection

keywords

https://images.abnormalsecurity.com/production/images/L_Abnormal-homepage_Opengraph.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1740090372&s=5d61b4c2e242be3ca70dfe1d54859b11

https://abnormal.ai/threat-intelligence/blog

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/T_Abnormal-homepage_Opengraph.png?w=800&h=418&q=82&auto=format&fit=crop&dm=1740090398&s=d6f915fc8861f3928b09a79dae44e4be

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"Threat Intelligence Blog | Abnormal AI"}}

<p>Abnormal Named a Leader in Gartner® Magic Quadrant™ </p>

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

MenuItem

Pagination

PagePropsProvider

ThreatIntelligenceBlog

BreadcrumbItem

HeaderNav

BladesDynamicSubpageNavigation

BreadcrumbNavigation

Footer

NavLink

EntriesCardEntryNew

HeaderSpacing

SearchInput

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

date-fns

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

Abnormal Careers

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Privacy/Legal

Abnormal Why Abnormal

Abnormal Landing Pages

react-aria

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

InboxPrime AI: Phishing Kit Fueling AI-Powered Cybercrime

Threat Intel

InboxPrime AI: New Phishing Kit Fueling Scalable, AI-Powered Cybercrime

Attack Stories

Security Superlatives: 2025’s Phishiest Attacks and Boldest Offenders

Fake Microsoft Teams Invite Used to Deploy Malicious OAuth App

Fake Microsoft Teams Meeting Invite Used to Deploy Malicious OAuth App

Cyber LNK Weaponizes Windows Shortcuts for Malware

Impact Solutions: Point-and-Click Toolkit Democratizing Malware

Impact Solutions: The Point-and-Click Toolkit Democratizing Malware Delivery

Attackers Steal Duo OTPs to Compromise Higher Ed Accounts

What the Salesloft Drift Breach Reveals

When Integrations Become Exploits: What the Salesloft Drift Breach Reveals

Microsoft Direct Send Abuse: Why Legacy Defenses Fall Short

Lessons from Federal Cyber Breaches

Email as the Adversary Foothold: Lessons from Federal Cyber Breaches

ScreenConnect Abuse Highlights Risks of Trusted IT Tools

ScreenConnect Abuse Highlights the Risks of Trusted IT Tools

Compromised Police & Government Accounts on the Dark Web

The Dark Web Economy for Compromised Government and Police Email Accounts

How Bad Actors Are Targeting College Athletics

College Athletics Under Email Attack: How Bad Actors Are Targeting the Sidelines

SharePoint “ToolShell” Exploit: Guidance for CISOs

Retail Cybersecurity Trends in the US and UK

Data & Trends

Retail Cybersecurity Trends: New Data Reveals Predictable Patterns in the US and UK

Multi-Party Scams: How Attackers Build Fake Threads

Inside the Multi-Party Scam: How Attackers Build Entire Conversations to Steal Your Trust

VEC and BEC Engagement Trends by Region

Global Email Threat Landscape: Eye-Opening VEC and BEC Engagement Trends by Region

Custom Phishing Kits Enable Bespoke Impersonation Attacks

Custom Phishing Kits: How Cybercriminals Create Bespoke Brand Impersonation Attacks

Breaking Down a Real Vendor Email Compromise Attack

Vendor Email Compromise

Thread Hijacked: Breaking Down a Real Vendor Email Compromise Attack

FluxPanel: Phishing-Enabled Ecommerce Checkout Hijacks

Inside FluxPanel: How Phishing Enables Real-Time Ecommerce Checkout Hijacks

Email Threats Targeting Financial Services Jump 25%

Assets Under Attack: Email Threats Targeting Financial Services Jump 25%

Flask Phishing Kit: Targeted Credential Theft

Flask Phishing Kit: Targeted Credential Theft Using Open-Source Technology

New Data Reveals Alarming Employee Engagement with VEC

The Hidden Cost of Trust: New Data Reveals Alarming Employee Engagement with Vendor Email Compromise

Stopping Email Bombing Attacks

Legitimate Senders, Weaponized: How Abnormal Stops Email Bombing Attacks

EvilPanel: The New Face of Automated AiTM Phishing

ByteDance Live Panel: Real-Time Phishing-as-a-Service

ByteDance Live Panel: An Advanced Phishing-as-a-Service Kit with Real-Time Monitoring

Attackers Exploit DKIM & Turn OAuth Alerts into Phishing Lures

Replay, Reuse, and Rob: How Attackers Exploit DKIM and Turn Google OAuth Alerts into Phishing Lures

Protect Against Pig Butchering Fraud: Key Insights

Inside Pig Butchering: A Behavioral Breakdown of a Global Fraud Operation

Multi-Stage Phishing Attack Exploits AI-Powered Gamma

Multi-Stage Phishing Attack Exploits Gamma, an AI-Powered Presentation Tool

XFiles: A Fileless Malware Delivered via Phishing

XFiles: A Fileless Malware Delivered via Phishing Campaigns

Atlantis AIO: Credential Stuffing Across 140+ Platforms

Inside Atlantis AIO: Credential Stuffing Across 140+ Platforms

Black Basta Uses Generative AI to Supercharge Cybercrime

Exploring Black Basta’s Use of Generative AI to Supercharge Cybercrime

AI-Generated Zoom Impersonation Exploits Tax Season

AI-Generated Zoom Impersonation Attack Exploits Tax Season to Deploy Remote Desktop Tool

Phishing Attacks Exploit Trusted Design & Diagramming Tools

Inside the New Wave of Phishing Attacks Exploiting Trusted Design and Diagramming Tools

Nonprofits Face a Rising Wave of Email Attacks

Mission Interrupted: Nonprofits Face a Rising Wave of Email Attacks

Attackers Use PDF Annotations to Mask Malicious QR Codes

Hiding in Plain Sight: How Attackers Use PDF Annotations to Mask Malicious QR Codes

Multi-Layered Cryptocurrency Fraud via CryptoGrab

Multi-Layered Cryptocurrency Fraud: How CryptoGrab Drains Millions Through Scam Websites and Phishing

How Attackers Exploit Open Redirects to Bypass Legacy SEGs

When SEGs Fail: How Attackers Exploit Open Redirects to Bypass Legacy Email Security

That Word Document Isn’t Broken—It’s a Phishing Attack

That Word Document Isn’t Broken—It’s a Phishing Attack in Disguise

New Research: AI’s Role in the Escalating Threat Landscape

New Research: AI’s Role in the Escalating Email Attack Landscape

5 Ways Cybercriminals Exploit Google Services

Protect Your Google Accounts: 5 Ways Cybercriminals Exploit Google Services

Threat Actors Abuse Docusign for Sophisticated Phishing

When SEGs Fail: Threat Actors Abuse Docusign to Launch Sophisticated Phishing Attacks

Attackers Exploit Psychology to Bypass MFA

The Never-Ending Loop of Phishing: How Attackers Exploit Psychology to Bypass MFA and Compromise Accounts

Attackers Exploit Vendor Relationships for Phishing

When SEGs Fail: Attackers Exploit Vendor Relationships for Credential Phishing

How GhostGPT Empowers Cybercriminals with Uncensored AI

Exploring APAC Email Security Threats and Attack Trends

Punycode Attacks: How It Works & Real-World Examples

The Punycode Problem: Protecting Your Inbox from Deceptive Domains

Threat Actors Weaponize Google Translate for Phishing

How Threat Actors Weaponize Google Translate for Phishing

2025 Cyberattack Forecast: Top Email Threats

2025 Cyberattack Forecast: Top Email Threats to Watch for

How Phishing Kits Work: Unpacking Cybercriminal Tools

How Phishing Kits Work: Unpacking Cybercriminal Tools in 2024

WormGPT's Demise: What Cybercriminals Are Using Now

What Happened to WormGPT and What Are Cybercriminals Using Now?

Manufacturing Industry Faces Wave of Advanced Attacks

Manufacturing Sector at Risk: Industry Faces Wave of Advanced Email Attacks

Dropbox Phishing Attack Capitalizing on Open Enrollment

Adversary-in-the-Middle Tactics Elevate Dropbox Phishing Attack Capitalizing on Open Enrollment

Spike in Email Attacks Targeting the Healthcare Industry

Critical Condition: Spike in Email Attacks Targeting the Healthcare Industry

Attackers Exploit URL Rewriting to Hack M365 Accounts

Bypassing Legacy SEGs: How Attackers Exploit URL Rewriting to Hack M365 Accounts

Advanced Email Threats Evading Detection in User Inboxes

4 Examples of Advanced Email Threats Evading Detection in User Inboxes

Cybercriminals Use Evilginx to Bypass MFA

Cybercriminals Use Evilginx to Bypass MFA: Gmail, Outlook, and Yahoo Among Top Targets

Rise of Malicious AI: 5 Insights from an Ethical Hacker

Artificial Intelligence

The Rise of Malicious AI: 5 Key Insights from an Ethical Hacker

Cyberattacks Disrupting the Transportation Industry

Threats in Transit: Cyberattacks Disrupting the Transportation Industry

QR Code Phishing: Fleeting Risk or an Enduring Threat?

One Year Later: Is QR Code Phishing a Fleeting Risk or an Enduring Threat?

Top 5 Cyberattack Tactics Targeting Microsoft Accounts

Protecting Your Microsoft Accounts: Understanding the Top 5 Cyberattack Tactics

650,000 Emails Exposed in Attacks on Education Sector

Education Sector Hit Hard: 650,000 Emails Exposed in Recent Cyberattacks

Threat Report: BEC and VEC Attacks Continue to Surge

Threat Report: BEC and VEC Attacks Continue to Surge, Outpacing Legacy Solutions

350% Increase in File-Sharing Phishing Attacks

File-Sharing Fraud: Data Reveals 350% Increase in Hard-to-Detect Phishing Trend