Report: GenAI Drives 1,760% Surge in Business Email Compromise Attacks

A report recently published by Perception Point, a provider of advanced email and workspace security solutions, has identified a 1,760% year-on-year increase in social engineering-based Business Email Compromise (BEC) attacks over the course of 2023. Perception Point's '2024 Annual Report: Cybersecurity Trends & Insights' highlights how threat actors are leveraging increasingly accessible GenAI tools to scale and craft highly sophisticated and novel social engineering attacks. Also reported was a substantial shift to attacks using evasive tactics, including quishing (QR code phishing) and two-step phishing, that bypass traditional security systems. The report's findings are based on in-depth analysis by Perception Point's Incident Response team and data collected from the company's threat detection platform.

The past year has been defined by unprecedented advances in the capabilities and accessibility of GenAI, which malicious actors have harnessed to enhance and scale cyberattacks. In particular, GenAI has fueled the phenomenal growth in BEC attacks, facilitating incredibly well-crafted and targeted social engineering-based attacks that are challenging to detect. Whereas BEC attacks accounted for only 1% of all cyberattacks in 2022, their proportion of the total rose to 18.6% of all attacks in 2023.

A deeper exploration of 2023's most prominent attack trends reveal a number of other concerning developments that threaten the modern organization's workspace, which encompasses email, web browsers, and cloud collaboration channels.

Phishing is still the top cyber threat, accounting for more than 70% of all attacks, with little change from the previous year. But quishing emerged as a new trending threat in 2023, accounting for 2.7% of all phishing attempts. Attackers are exploiting the prevalence and inherent trust of QR codes in modern life to turn a straightforward scan into a serious threat. Throughout 2023, 1 out of 18 (6%) QR codes sent via email were malicious.

Over the year, the prevalence of two-step phishing attacks increased by 175%. These attacks are particularly deceptive as unlike traditional phishing methods, their multi-stage character makes them especially hard to detect. In these attacks, threat actors exploit legitimate services and hosting sites, often utilized for website-building, web hosting, or file-sharing. Exploiting the reputation of these well-known domains helps evade detection, particularly as these platforms are commonly used for legitimate business collaboration.

Additionally, account takeover (ATO) based threats, in which a legitimate account outside the organization is compromised (Vendor Email Compromise) and then used in highly targeted attacks, increased by 350% in 2023. Threat actors also impersonate well-known brands and invest in impersonating the brand of specific organizations that they target. In 2023, 55% of all brand impersonation attacks impersonated the organization that an employee works for.

Email continued to be the top attack vector, with 1 in 5 emails categorized as either malicious or spam. However, threat actors also exploited the expanding user workspace to target organizations in new ways:

  • Phishing attacks via the web browser increased in frequency from 60% of all browser-based attacks in 2022 to nearly 80% of all browser-based attacks in 2023.
  • Malware distribution accounted for 65% of attacks in M365 Apps including OneDrive, SharePoint and Teams.
  • Evasive threats and malware accounted for more than 50% attacks targeting CRMs like Zendesk and Salesforce.

The full report can be viewed here.

Featured

  • AI Is Now the Leading Cybersecurity Concern for Security, IT Leaders

    Arctic Wolf recently published findings from its State of Cybersecurity: 2025 Trends Report, offering insights from a global survey of more than 1,200 senior IT and cybersecurity decision-makers across 15 countries. Conducted by Sapio Research, the report captures the realities, risks, and readiness strategies shaping the modern security landscape. Read Now

  • Analysis of AI Tools Shows 85 Percent Have Been Breached

    AI tools are becoming essential to modern work, but their fast, unmonitored adoption is creating a new kind of security risk. Recent surveys reveal a clear trend – employees are rapidly adopting consumer-facing AI tools without employer approval, IT oversight, or any clear security policies. According to Cybernews Business Digital Index, nearly 90% of analyzed AI tools have been exposed to data breaches, putting businesses at severe risk. Read Now

  • Software Vulnerabilities Surged 61 Percent in 2024, According to New Report

    Action1, a provider of autonomous endpoint management (AEM) solutions, today released its 2025 Software Vulnerability Ratings Report, revealing a 61% year-over-year surge in discovered software vulnerabilities and a 96% spike in exploited vulnerabilities throughout 2024, amid an increasingly aggressive threat landscape. Read Now

  • Motorola Solutions Named Official Safety Technology Supplier of the Ryder Cup through 2027

    Motorola Solutions has today been named the Official Safety Technology Supplier of the 2025 and 2027 Ryder Cup, professional golf’s renowned biennial team competition between the United States and Europe. Read Now

  • Evolving Cybersecurity Strategies

    Organizations are increasingly turning their attention to human-focused security approaches, as two out of three (68%) cybersecurity incidents involve people. Threat actors are shifting from targeting networks and systems to hacking humans via social engineering methods, living off human errors as their most prevalent attack vector. Whether manipulated or not, human cyber behavior is leveraged to gain backdoor access into systems. This mainly results from a lack of employee training and awareness about evolving attack techniques employed by malign actors. Read Now

New Products

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.