Cofense Phishing Prevention & Email Security Blog

Phishing Emails Found in Proofpoint-Protected Environments

2020 Phishing Email Attacks: 5 Predictions. 1 Pandemic. What Really Happened?

Phish Found in Proofpoint-Protected Environments – Week ending December 4, 2020

You Must Quarantine! Fake Office 365 Email Leads to Curiosity

Cofense Phishing Detection and Response Platform

Emergency Financial Aid Phish

The New Cofense Resource Center

By Carolyn Merritt  Today, Cofense officially launched its new Resource Center. Formerly known as Community, the new Resource Center features a completely redesigned interface, smarter search capabilities and integrated support ticketing.    This initiative has been in the works for some time. We heard from internal and external users alike that the old Community was difficult to navigate, and that information was challenging to locate. We believe those issues have been solved with our new interface, an integration with our Zendesk ticketing system, and a new set of capabilities designed to improve the user experience.  Also, we organized the new Resource Center by product to make it easier to search and navigate...

Phish Found in Proofpoint-Protected Environments – Week ending November 27, 2020

Keeping Santa’s Helpers Out of Your Inbox

As with everything else this year, the holiday shopping season will be open to more cyber threats as we shift from hitting the brick-and-mortar retail outlets to the online store front. Threat actors have your wallet and credentials on their shopping list. When it comes to preparing your users, friends and family for the holiday shopping season, we’ll cover some basics to remind everyone to remain calm and protect their wallets and credentials. Gift Cards The ease of sending gift cards makes these a top purchase. While retailers have made it easier to purchase online and send electronically, threat actors...

Phishers Continue to Spoof WebEx

Available Today: The Cofense Intelligence Q1 2020 Phishing Review

Coronavirus-Themed Phish Continue to Surge

Coronavirus Redefines the Phishing Threat Landscape

This Employee Satisfaction Survey is Not so Satisfying… Except for the Credential Phishing Actors Behind It.

Threat Actors Innovate to Exploit COVID-19, Delivering OpenOffice .ODP Attachments on a Shoestring Budget

Threat Actor Uses OneNote to Learn Credential Phishing and Evade Microsoft and FireEye Detection

Phishers Are Using Google Forms to Bypass Popular Email Gateways

Emotet Gears Up to File (Your) Taxes

Phishing Emails Found in Proofpoint-Protected Environments

2020 Phishing Email Attacks: 5 Predictions. 1 Pandemic. What Really Happened?

Phish Found in Proofpoint-Protected Environments – Week ending December 4, 2020

You Must Quarantine! Fake Office 365 Email Leads to Curiosity

Cofense Phishing Detection and Response Platform

Emergency Financial Aid Phish

The New Cofense Resource Center

By Carolyn Merritt  Today, Cofense officially launched its new Resource Center. Formerly known as Community, the new Resource Center features a completely redesigned interface, smarter search capabilities and integrated support ticketing.    This initiative has been in the works for some time. We heard from internal and external users alike that the old Community was difficult to navigate, and that information was challenging to locate. We believe those issues have been solved with our new interface, an integration with our Zendesk ticketing system, and a new set of capabilities designed to improve the user experience.  Also, we organized the new Resource Center by product to make it easier to search and navigate...

Phish Found in Proofpoint-Protected Environments – Week ending November 27, 2020

Keeping Santa’s Helpers Out of Your Inbox

As with everything else this year, the holiday shopping season will be open to more cyber threats as we shift from hitting the brick-and-mortar retail outlets to the online store front. Threat actors have your wallet and credentials on their shopping list. When it comes to preparing your users, friends and family for the holiday shopping season, we’ll cover some basics to remind everyone to remain calm and protect their wallets and credentials. Gift Cards The ease of sending gift cards makes these a top purchase. While retailers have made it easier to purchase online and send electronically, threat actors...

Remote Access Trojan Uses Sendgrid to Slip through Proofpoint

The CofenseTM Phishing Defense CenterTM observed a malware campaign masquerading as an email complaint from the Better Business Bureau to deliver the notorious Orcus RAT, part of the free DNS domain ChickenKiller which we blogged about in 2015. Here’s how it works:

Phishing Attackers Are Abusing WeTransfer to Evade Email Gateways

This Phishing Attacker Takes American Express—and Victims’ Credentials

Recently, the CofenseTM Phishing Defense CenterTM observed a phishing attack against American Express customers, both merchant and corporate card holders. Seeking to harvest account credentials, the phishing emails use a relatively new exploit to bypass conventional email gateway URL filtering services.

UK Banking Phish Targets 2-Factor Information

Under the Radar – Phishing Using QR Codes to Evade URL Analysis

Phishing Attacks on High Street Target Major Retailer

Houdini Worm Transformed in New Phishing Attack

By Nick Guarino and Aaron Riley The Cofense Phishing Defense Center™ (PDC)  and Cofense Intelligence™ have identified a new variant of Houdini Worm targeting commercial banking customers with campaigns containing either URLs, .zip, or .mht files. This new variant is named WSH Remote Access Tool (RAT) by the malware’s author and was released on June 2, 2019. Within five days, WSH RAT was observed being actively distributed via phishing. Figure 1 shows an example message from this campaign.

This ‘Voice Mail’ Is a Phish—and an Email Gateway Fail

The Zombie Phish Is Back with a Vengeance

Keep a close on your inboxes—the Zombie Phish is back and it’s hitting hard. Last October, on the eve of Halloween, the CofenseTM Phishing Defense CenterTM reported on a new phishing threat dubbed the Zombie Phish. This phish spreads much like a traditional worm. Once a mailbox’s credentials have been compromised, the bot will reply to long-dead emails (hence, Zombie) in the inbox of the infected account, sending a generic phishing email intended to harvest more victims for the Zombie hoard.