some of the new Data from the Anti-Phishing Working Group (AWPG) indicates Q2 2021 showed similar type of Phishing activity to the prior quarter, Indicating no slowdown in attacks. We’d all like to see some sort of reprieve to the heightened levels of phishing and spear phishing attacks that makes the process simple we’ve experienced over the last 18 months. Since the pandemic started, the cybercrime ecosystem has grown and evolved into new attack methods and business models never before seen, with phishing remaining at the forefront. According to the AWPG data, the number of brands targeted in Q2 rose by more than 15 percent, and financial Institutions and Social Media continue to be primary targets of phishing attacks.
Phishing-As-A-Service Responsible For Over 300,000 URLs Used In Attacks
A new phishing-as-a-service (Phaas) spotted by Microsoft puts quality phishing templates and sites into the hands of any would-be cyber attacker. As “crime as a service” has continued to expand, it’s no surprise to hear that the Microsoft 365 Defender Threat Intelligence Team has spotted a set of phishing campaigns that all seem to utilize the phishing as a service operator; the group responsible has been referred to as BulletProfitLink or Anthrax with over 300,000 subdomains in use from a single campaign alone. These PhaaS providers offer complete malicious websites that include registration and sign-in pages, phishing templates, as well as hosting and support.