Resources

Press Release
Press Release

Fortra Acquires PhishLabs to Continue Expansion of Cybersecurity Portfolio

MINNEAPOLIS (October 19, 2021) — Fortra announced today the acquisition of PhishLabs, a leading cyber threat intelligence company that protects organizations from attacks on their brands, employees, and digital assets. PhishLabs sources intelligence across the internet to proactively find and mitigate digital risks. The team and solutions from PhishLabs will join Fortra’ growing cybersecurity...
Multi-Stage Vishing Attacks Skyrocket
Blog
Blog

Multi-Stage Vishing Attacks Skyrocket

By Jessica Ryan on Tue, 10/19/2021
Multi-stage vishing attacks have more than doubled since Q2, overtaking BEC attacks as the second most reported response-based threat. These two-pronged attacks differ from conventional vishing by combining malicious emails and phone calls to trick victims into disclosing sensitive information. Emails associated with these campaigns are particularly adept at getting past attack controls because...

BazaLoader Leads Payloads as Families Fluctuate, Players Broaden

BazaLoader Leads Payloads as Families Fluctuate, Players Broaden
BazaLoader Leads Payloads as Families Fluctuate, Players Broaden
phishlabs_admin Thu, 01/11/2024 - 15:06
Malware delivered via email continues to be the primary source of damaging ransomware attacks targeting businesses and their brands. The malware threat landscape has been tumultuous over the course of 2021, with unskilled actors enjoying a lower barrier to entry through as-a-service models, allowing easy access to proven and sophisticated malicious software. These tools are in a constant state of...

Fake Mobile Apps Leave Users Vulnerable, Damage Brands

Fake Mobile Apps Leave Users Vulnerable, Damage Brands
Fake Mobile Apps Leave Users Vulnerable, Damage Brands
phishlabs_admin Thu, 01/11/2024 - 15:06
Cloned and spoofed mobile applications can damage a brand’s reputation and compromise user data. Fake mobile apps are widely available on both third-party and official app stores and rely heavily on brand impersonation to build trust and drive downloads. Many mobile users lack the security posture normally practiced on desktops, leaving devices vulnerable to compromise. Fake Apps Fake mobile apps...
Financial Services: The Top Tools and Tactics Used to Execute Phishing Attacks
Blog
Blog

Financial Services: The Top Tools and Tactics Used to Execute Phishing Attacks

Tue, 09/21/2021
Financial institutions have experienced a 15.3% increase in share in phishing attacks, according to PhishLabs’ Quarterly Threat Trends & Intelligence Report . This increase establishes financial services as the top targeted industry and shows threat actors continue to place high value on compromised banking credentials. In this post, we take a look at the tools and infrastructure used by threat...
Free Tools and Services Fuel Phishing Increase
Blog
Blog

Free Tools and Services Fuel Phishing Increase

Thu, 09/16/2021
Phishing volume continues to outpace 2020 by 22%, according to PhishLabs’ Quarterly Threat Trends & Intelligence Report. Every quarter, PhishLabs analyzes hundreds of thousands of phishing and social media attacks targeting enterprises to identify key trends in the threat landscape. In this piece we take a look at phishing volume, industries targeted, and how attacks are being staged. 2021...
Top 10 TLDs Abused
Blog
Blog

Top 10 TLDs Abused

Tue, 09/14/2021
Domains are some of the most highly abused tools threat actors use to manipulate victims and execute phishing attacks. In the latest PhishLabs Quarterly Threat Trends & Intelligence report, we break down how actors are abusing Legacy Generic (gTLD) and Country Code (ccTLD) Top-level domains, HTTPS, and free security certificates to target enterprises. Top-level Domain Abuse Nearly half of all...
Press Release
Press Release

PhishLabs Recognized by Inc. 5000 as One of the Fastest-Growing Companies in America

September 8, 2021, Charleston, SC – PhishLabs, the leading provider of Digital Risk Protection solutions, has been recognized as one of America’s fastest-growing private companies in Inc. Magazine’s annual Inc. 5000 list. The Inc. 5000 list is a unique look at the most successful companies within America’s economy and considered the most prestigious ranking of independent small businesses. “Look...
Social Media Attacks Increase 47%
Blog
Blog

Social Media Attacks Increase 47%

Wed, 09/08/2021
Social media threats targeting enterprises have increased 47% since January 2021, according to PhishLabs Quarterly Threat Trends & Intelligence Report . While the attack volume varies by industry, today the average organization is being targeted on social media with increasing frequency. Every quarter, PhishLabs analyzes and mitigates hundreds of thousands of phishing and social media attacks...
The Most Prevalent Threats to Corporate Inboxes
Blog
Blog

The Most Prevalent Threats to Corporate Inboxes

Thu, 08/26/2021
Every quarter, PhishLabs analyzes and mitigates hundreds of thousands of phishing and social media attacks targeting enterprises. In this post, we discuss the top threats reaching corporate inboxes based on incidents detected and mitigated with our Suspicious Email Analysis solution. Credential Theft Credential theft continues to represent the largest share of threats targeting corporate inboxes...
Account Takeover Protection
3 Strategies to Enhance Brand Threat Intelligence
Blog
Blog

3 Strategies to Enhance Brand Threat Intelligence

By Jessica Ryan on Thu, 08/19/2021
Brand threats have accounted for 68% of fraud attacks so far this year. Contrary to traditional cyber attacks, which are designed to compromise the infrastructure or circumvent controls, brand threats live outside of the organization’s control and compromise the reputation of your brand. Common types of brand misrepresentation include spoofed emails, social media scams, and fake mobile apps. The...
Press Release
Press Release

New PhishLabs Research Finds Sharp Jump in Attacks on Crypto As Overall Phishing Volume Increases 22%

Quarterly Threat Trends and Intelligence Report Finds Increase in Phishing Attacks Year-to-Date Over the First Six Months of 2020; Qbot More Than Half of Payloads Encountered, as Darkside and Others Go Offline August 17, 2021, Charleston, SC – PhishLabs , the leading provider of Digital Risk Protection solutions, today released their Quarterly Threat Trends and Intelligence Report. Overall, the...
New Quarterly Threat Trends Intelligence Report Now Available
Blog
Blog

New Quarterly Threat Trends Intelligence Report Now Available

Tue, 08/17/2021
Phishing volume in 2021 continues to outpace last year by 22%, according to PhishLabs Quarterly Threat Trends & Intelligence Report. The August 2021 report uses data from hundreds of thousands of attacks analyzed and mitigated by PhishLabs to identify the most recent top threats targeting brands and determine emerging trends throughout the threat landscape. Key Findings of the Quarterly Threat...
Press Release
Press Release

PhishLabs Recognized as a Best Place to Work for Sixth Consecutive Year

Charleston-based cybersecurity company is named a top employer. August 11, 2021, Charleston, SC – PhishLabs , the leading provider of Digital Risk Protection solutions, has been recognized as one of the Best Places to Work for the sixth consecutive year. The award recognizes top-notch employers who continue to put their employees first during these challenging times. Check out career opportunities...
OSINT: How Usernames Unlock Investigations
Blog
Blog

OSINT: How Usernames Unlock Investigations

Tue, 08/10/2021
One piece of evidence that adds value to investigating social media threats is the threat actor’s chosen username. Usernames can hold meaning to the individual, and as a result provide useful information when expanding investigations to different social platforms. As we covered in our last OSINT post , connecting all known social media accounts to one user is a critical step in determining risk...
Threat Evasion Techniques: Restricting by Interaction
Blog
Blog

Threat Evasion Techniques: Restricting by Interaction

Mon, 08/02/2021
Threat actors improve the resiliency of phishing campaigns by concealing malicious content from security teams. Avoiding detection increases an attacker’s odds of reaching more victims and achieving a more lucrative outcome. There are many types of evasion techniques that can be used individually or in tandem. In this post we discuss active evasion, restricting by interaction. Restricting by...
Account Takeover Protection
quarterly threat trends & intelligence report thumbnail
On-Demand Webinar
On-Demand Webinar

Quarterly Threat Trends & Intelligence Webinar (Aug 2021)

John LaCour, Founder and CTO at PhishLabs In the first half of 2021, PhishLabs detected and mitigated hundreds of thousands of external phishing, social media, and email threats targeting a broad range of enterprises and brands. In this webinar, John LaCour, Founder and CTO of PhishLabs, will analyze the Q2 findings and provide insight into key trends shaping the threat landscape. Attendees will...
Threat Evasion Techniques: Restricting By Device
Blog
Blog

Threat Evasion Techniques: Restricting By Device

Tue, 07/27/2021
Cybercriminals use evasion techniques to bypass scanning technologies and defeat human analysis in order to extend the life of phishing campaigns. There are a variety of evasion techniques and criminals often use multiple variations in tandem. In this post, we focus on active evasion, restricting non-targets by device. Restricting by Device Active evasion is any method an attacker uses to prevent...
Account Takeover Protection
Qbot Leads Payload Volume in Q2
Blog
Blog

Qbot Leads Payload Volume in Q2

By Jessica Ryan on Fri, 07/23/2021
In Q2, ransomware made headlines with multiple high-profile attacks and tactics. The largest infrastructure shutdown in U.S. history brought the East Coast to a halt, operators doubled up on ransomware strains, and reported attacks are on track to beat 2020, with numbers already surpassing Q1 by 38% . As ransomware continues to drive data loss and fraud for enterprises and their brands, PhishLabs...
External Data Leaks
Threat Evasion Techniques: Restricting by Location
Blog
Blog

Threat Evasion Techniques: Restricting by Location

Wed, 07/21/2021
Evasion techniques are methods attackers deploy to extend the life of phishing campaigns. The longer a threat is active, the more opportunity it has to claim victims. Attackers have two objectives when applying evasion techniques: Defeat automated scanning technologies designed to quickly shut down or prevent attacks from going live. Increase the time, cost, and complexity required for security...