데일리리치앤드럭키

Threat actors increasingly exploit file sharing services to advance phishing attacks, while continuing to scale traditional BEC attacks by 50% over the last year

Abnormal Security (https://cts.businesswire.com/ct/CT?id=smartlink&url=http%3A%2F%2Fabnormalsecurity.com%3Futm_source%3Dbusinesswire%26utm_medium%3DPR%26utm_content%3Dh2-2024-threatreport&esheet=54108849&newsitemid=20240814650661&lan=en-US&anchor=Abnormal+Security&index=1&md5=902fb951dcd2399bbccdfc9c15862b8b), the leader in AI-native human behavior security, today released its H2 2024 Email Threat Report (https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fabnormalsecurity.com%2Fresources%2Fh2-2024-report-file-sharing-phishing-attacks%3Futm_source%3Dbusinesswire%26utm_medium%3DPR%26utm_content%3Dh2-2024-threatreport&esheet=54108849&newsitemid=20240814650661&lan=en-US&anchor=H2+2024+Email+Threat+Report&index=2&md5=4ee8a50fd4d0aa5389d53b7cdfa9a702), revealing the growing threat of file-sharing phishing attacks, whereby threat actors use popular file-hosting or e-signature solutions as a disguise to manipulate their targets into revealing private information or downloading malware.

Sophisticated File-Sharing Phishing Attacks on the Rise

Examining data collected between June 2023 and June 2024, Abnormal saw file-sharing phishing volume more than triple, increasing 350% over the year. The majority of these attacks were sophisticated in nature, with 60% exploiting legitimate domains, most commonly webmail accounts, such as Gmail, iCloud, and Outlook; productivity and collaboration platforms; file storage and sharing platforms like Dropbox; and e-signature solutions like Docusign.

“The trust that people place in these kinds of services