White Papers in Fraud Management & Cybercrime

BEC: Why This Basic Threat Is Difficult to Detect

Business Email Compromise (BEC) is “one of the most financially damaging online crimes” according to the FBI. It is a cunning form of email impersonation that, when combined with human error, can be incredibly disruptive and damaging. Phishing and Account Takeover (ATO) attacks target employees and trick them into...

Crucial Phishing Benchmark Stats You Need to Know

Read the latest Phishing Benchmark Global Report to find out which industry and region have the best (and worst) click rates.

Proofpoint Recognized in Gartner® Market Guide for Email Security

Download the report to view the email threat landscape and why email security is top of mind now.

Breaking Down BEC

Download this guide to see how to classify BEC attacks using identity, deception and theme.

2023 Gartner® Market Guide for Email Security

Download to understand why Gartner recommends supplementing your current security tools with a behavioral AI solution.

A Single Cyberattack = Loss in Consumer Trust & Brand Damage

Download this casestudy to learn how to protect your brand by enforcing an email authentication protocol and use third-party brand protection services and more.

Admins Guide to Passwordless: Busting Passwordless Myths

During account registration, the authenticator generates a credential and passes the corresponding public key to the website for association with the user account. But how do we know that it’s really our user that holds the credential and not an imposter? For instance, someone who stole the authenticator device....

Quarterly Threat Trends & Intelligence Report

In Q2 2022, Agari and PhishLabs detected and mitigated hundreds of thousands of phishing, social media, email, and dark web threats targeting a broad range of enterprises and brands. The Quarterly Threat Trends & Intelligence Report provides an analysis of the latest findings and insights into key trends shaping the...

Phishing-Resistant MFA: How to Know it When You See it

In the wake of President Biden's 2021 executive order, security leaders across sectors are now seeking phishing-resistant multifactor authentication. But what exactly is it, and how is it best deployed? Yubico's Derek Hanson outlines a mature approach to MFA.

Abnormal Intelligence: New Threat Intel Site Launched

The Abnormal Security team just launched a new threat intel site named Abnormal Intelligence. Crane Hassold shares resources available, including an attack library, semi-annual threat intel reports, a glossary and exclusive insights from the Abnormal team.

Sponsored by Cofense

Q3 2022 Phishing Intelligence Trends Review: Threats that Matter

The Cofense Intelligence™️ team analyzes millions of emails and malware samples to understand the phishing landscape. During Q3, their expert threat analysts investigated both new and long-standing phishing trends. From delineating threat actors’ abuse of legitimate services such as Dropbox, DocuSign, and...

3 Tips to Protect your Entire Organization with LastPass

Download this whitepaper to learn about 3 crucial tips to protect your organisation from a cyberthreat.

Sponsored by Cofense

Strategic Analysis: Credential Phishing Targeting Government Contractors

Threat actors are running a series of campaigns spoofing several departments of the United States government. The emails claim to request bids for government projects but lead victims to credential phishing pages instead. These campaigns have been ongoing since at least mid-2019 and were first covered in our Flash...

Sponsored by Cofense

19 Minutes: A Minute-by-Minute Account of Collective Phishing Defense in Action

See how one company stopped a phishing attack in 19 minutes!

Sponsored by Cofense

Sextortion 101: What to Know & What to Do

If you receive a sextortion email at work, how did the criminals find you? Do they really have embarrassing videos, your browsing history, or password? Cofense can shed some light on this dark corner of the web. After all, we’ve been monitoring the largest confirmed dump of email addresses used for sextortion to...