Report: GenAI Drives 1,760% Surge in Business Email Compromise Attacks

A report recently published by Perception Point, a provider of advanced email and workspace security solutions, has identified a 1,760% year-on-year increase in social engineering-based Business Email Compromise (BEC) attacks over the course of 2023. Perception Point's '2024 Annual Report: Cybersecurity Trends & Insights' highlights how threat actors are leveraging increasingly accessible GenAI tools to scale and craft highly sophisticated and novel social engineering attacks. Also reported was a substantial shift to attacks using evasive tactics, including quishing (QR code phishing) and two-step phishing, that bypass traditional security systems. The report's findings are based on in-depth analysis by Perception Point's Incident Response team and data collected from the company's threat detection platform.

The past year has been defined by unprecedented advances in the capabilities and accessibility of GenAI, which malicious actors have harnessed to enhance and scale cyberattacks. In particular, GenAI has fueled the phenomenal growth in BEC attacks, facilitating incredibly well-crafted and targeted social engineering-based attacks that are challenging to detect. Whereas BEC attacks accounted for only 1% of all cyberattacks in 2022, their proportion of the total rose to 18.6% of all attacks in 2023.

A deeper exploration of 2023's most prominent attack trends reveal a number of other concerning developments that threaten the modern organization's workspace, which encompasses email, web browsers, and cloud collaboration channels.

Phishing is still the top cyber threat, accounting for more than 70% of all attacks, with little change from the previous year. But quishing emerged as a new trending threat in 2023, accounting for 2.7% of all phishing attempts. Attackers are exploiting the prevalence and inherent trust of QR codes in modern life to turn a straightforward scan into a serious threat. Throughout 2023, 1 out of 18 (6%) QR codes sent via email were malicious.

Over the year, the prevalence of two-step phishing attacks increased by 175%. These attacks are particularly deceptive as unlike traditional phishing methods, their multi-stage character makes them especially hard to detect. In these attacks, threat actors exploit legitimate services and hosting sites, often utilized for website-building, web hosting, or file-sharing. Exploiting the reputation of these well-known domains helps evade detection, particularly as these platforms are commonly used for legitimate business collaboration.

Additionally, account takeover (ATO) based threats, in which a legitimate account outside the organization is compromised (Vendor Email Compromise) and then used in highly targeted attacks, increased by 350% in 2023. Threat actors also impersonate well-known brands and invest in impersonating the brand of specific organizations that they target. In 2023, 55% of all brand impersonation attacks impersonated the organization that an employee works for.

Email continued to be the top attack vector, with 1 in 5 emails categorized as either malicious or spam. However, threat actors also exploited the expanding user workspace to target organizations in new ways:

  • Phishing attacks via the web browser increased in frequency from 60% of all browser-based attacks in 2022 to nearly 80% of all browser-based attacks in 2023.
  • Malware distribution accounted for 65% of attacks in M365 Apps including OneDrive, SharePoint and Teams.
  • Evasive threats and malware accounted for more than 50% attacks targeting CRMs like Zendesk and Salesforce.

The full report can be viewed here.

Featured

  • Street Smarts

    The ongoing acceptance of AI and advanced data analytics has allowed surveillance camera technology to shift from being a tactical tool to a strategic business solution. Combining traditional surveillance technology with AI-based data-driven insights can streamline transportation systems, enhance traffic management, improve situational awareness, optimize resource allocation and streamline emergency response procedures. Read Now

  • Protecting Your Zones

    It is game day. You can feel the crowd’s energy. In the parking lot. At the gate. In the stadium. On the concourse. Fans are eager to party. Food and merchandise vendors ready themselves for the rush. Read Now

  • The Progress of Biometrics

  • Next-Gen AI for Smart Cities

    The future of smart city technology is not being shaped in Silicon Valley — it is taking root in Dubuque, Iowa. With a population of about 60,000, this mid-sized city has become a live testbed for AI-driven traffic management thanks to a unique public-private collaboration led by Milestone Systems. Project Hafnia demonstrates how cities can transform urban mobility and safety through Responsible Technology—without costly infrastructure overhauls. Read Now

  • Midtown Manhattan Shooting Kills 4, Including NYPD Officer

    Four people were killed, including a NYPD officer, in a midtown Manhattan shooting on Monday. That’s according to CNN. Read Now

New Products

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.