Perception Point Incident Response Archives

New Phone Scams Evade Most Email Security Solutions

In this blog we discuss how phone scams have evolved, appearing more legitimate and evading detection engines of many email security vendors.

Nov-22

Perception Point Researchers Discover “Phishing in Motion” Video Scam

Perception Point researchers discover a 2-step phishing campaign that utilizes a video to execute its payload.

Sep-22

Strudel Exploit: New Evasion Technique Bypasses Many Email Security Solutions

Attackers are using a new evasion technique that exploits user information included in website address.

May-22

BYOB (Build Your Own Botnet) in action.

Attacks leveraging the BYOB framework for fraudulent activity in the wild has been around for a few years now. We believe that the cyber security…

Mar-22

Spear Phishing Attack Campaign Uses a Microsoft Verified App and Abuses OAuth Request Links

Attackers are using a Microsoft verified app, abusing OAuth request links in order to gain full control of the victims’ mailbox. The spear phishing attack is specifically targeting CISOs and other administrator-level users in the organization.

Feb-22

Beware of Trending Phishing Attacks Spoofing Financial Institutions that Combine URL Evasion and Geofencing Techniques

Perception Point recently detected multiple high-volume phishing campaigns in which the attackers are using URL evasion and geofencing techniques while spoofing a variety of worldwide banking institutions, notably Standard Bank, Banco Bradesco, and Citizens Financial Group Inc.

Jan-22

FormBook Is Back: This Time the Malware Attack Leverages Microsoft Excel

In this blog post, our Incident Response Team analyzes the attack chain of a FormBook malware campaign that recently targeted one of our customers by email.

Dec-21

A Spear Phishing Attack Campaign Spoofing Leading Email Clients Including Microsoft, Gmail, WebMail, and WorldClient

In this sophisticated spear phishing campaign, attackers, using social engineering techniques, attempted to lure unsuspecting victims to enter their login credentials to fake login portals impersonating Microsoft, Gmail, WebMail, and WorldClient and were conducted en masse to achieve their goals.

Nov-21

Geek Squad Phone Scam Campaign Aims to Hack Organizations

A sophisticated fraud impersonates Geek Squad and convinces victims to phone their “call center” and provide the attackers access to their computers

Sep-21

Why Advanced Phishing Protection is Needed: Attackers Are Using Salesforce’s Mass Email Service to Perpetrate Phishing Attacks

A sophisticated phishing attack spoofing the Israeli Postal Service and leveraging Salesforce mass email service for malicious purposes.

Aug-21

How to Detect Malware: Hancitor Malware Delivered Using Spoofed Docusign Email and Microsoft Word

Perception Point’s advanced email security service managed to intercept thousands of attack emails impersonating DocuSign, utilizing the Hancitor Malware. The following blog details this alarming attack.

Jul-21

Netflix Phishing Scams Rise by 250% in 3 Months

The Perception Point IR Team found a major increase (250%) in the number of Netflix Phishing scams this quarter compared to last quarter.

Mar-21

Author: Perception Point Incident Response