By Kuksung Nam, The Readable
May 22, 2023 7:25PM GMT+9
Microsoft warned of an increase in cybercriminal activities against business emails, saying that hackers are using more commoditized tactics to deploy their attacks.
In a recent report, Microsoft stated that business email compromise (BEC) is accelerating and hacking tactics are becoming more sophisticated. BEC is a type of phishing attack where cybercriminals impersonate someone else in an email and lure their target into sending sensitive information.
According to Microsoft, there were 35 million BEC attempts from April 2022 to April 2023, with 156,000 attempts happening each day on average. BEC attackers mostly targeted company executives, senior leaders, finance managers, and human resource staff who have access to employee records to get information they need.
Furthermore, the tech giant wrote that they found a 38% increase in cybercrime-as-a-service (CaaS) incidents targeting business emails from 2019 to 2022. CaaS is a term used to describe a business model where threat actors sell their tools and services to other individuals. The company discovered a significant trend among attackers who use platforms that provide services, such as creating large-scale malicious email campaigns.
The cover image of this article was designed by Areum Hwang.
Kuksung Nam is a journalist for The Readable. She has extensively traversed the globe to cover the latest stories on the cyber threat landscape and has been producing in-depth stories on security and privacy by engaging with industry giants, foreign government officials and experts. Before joining The Readable, Kuksung reported on politics for one of South Korea’s top-five local newspapers, The Kyeongin Ilbo. Her journalistic skills and reportage earned her the coveted Journalists Association of Korea award in 2021 for her essay detailing exclusive stories about the misconduct of a former government official. She holds a Bachelor’s degree in French from Hankuk University of Foreign Studies, a testament to her linguistic capabilities.