Email Attacks Drive Record Cybercrime Losses in 2024


The FBI’s Internet Crime Complaint Center (IC3) has released its 2024 Internet Crime Report. And it has revealed a record-breaking surge in cybercrime losses across the United States.

Last year, total losses reached $16.6 billion, which is a 33% increase from the previous year. Email continues to be the most exploited attack vector, with cybercriminals using it for phishing scams, business email compromise (BEC) attacks and data exfiltration at scale. Proofpoint looked at this year’s report through the lens of email security. Our review underscores the growing need for organizations to adopt layered, human-centric defenses that mitigate human-activated threats across email, cloud and collaboration platforms. Here are the top takeaways.

Read more…
Source: ProofPoint


Sign up for our Newsletter
The latest news and insights delivered right to your inbox.


Related:

  • Hackers can crash Cisco Secure Email gateways using malicious emails

    February 17, 2022

    Cisco has addressed a high severity vulnerability that could allow remote attackers to crash Cisco Secure Email appliances using maliciously crafted email messages. The security flaw (tracked as CVE-2022-20653) was found in DNS-based Authentication of Named Entities (DANE), a Cisco AsyncOS Software component used by Cisco Secure Email to check emails for spam, phishing, malware, and ...

  • Email Bug Allows Message Snooping, Credential Theft

    June 22, 2021

    Researchers warn hackers can snoop on email messages by exploiting a bug in the underlying technology used by the majority of email servers that run the Internet Message Access Protocol, commonly referred to as IMAP. The bug, first reported in August 2020 and patched Monday, is tied to the email server software Dovecot, used by ...

  • Protect yourself from a cyber attack — before it happens

    October 29, 2018

    The biggest threat to your firm’s security may be lurking in your inbox. Email is a primary means for RIA communication with clients, vendors, other third parties and within a firm. As a result, most data and security breaches happen through email, usually due to some combination of user error and gaps in cybersecurity protection. The ...

  • Simple Exploit Allows Attackers to Modify Email Content — Even After It’s Sent!

    August 23, 2017

    Security researchers are warning of a new, easy-to-exploit email trick that could allow an attacker to turn a seemingly benign email into a malicious one after it has already been delivered to your email inbox. Dubbed Ropemaker (stands for Remotely Originated Post-delivery Email Manipulation Attacks Keeping Email Risky), the trick was uncovered by Francisco Ribeiro, the researcher at email and ...