Resources

Blog
Blog

How to Stop Phishing Message Voicemail Attacks

Tue, 09/24/2019
At Agari we often talk about the evolving nature of advanced email attacks and the identity deception tactics that go with them. These attacks bypass legacy controls and like a magician delighting a curious audience, they trick the human psyche by targeting core human emotions such as fear, anxiety and curiosity. Of course, the magic in this case comes with ill intent. A good...
Advanced Persistent Threats (APT)
Consumer Phishing
Spear Phishing
Blog
Blog

From One to Many: Scattered Canary Evolves from One-Man Startup to BEC Enterprise

Tue, 06/04/2019
There is no denying that business email compromise (BEC) is big business, with losses exceeding a billion dollars in the United States in the last year alone. Globally, BEC attacks have cost more than $13 billion in the last five years. Chances are likely that you’ve probably been a recipient of one of these social-engineered emails yourself. But the question remains… who is...
ACID Research
Advanced Persistent Threats (APT)
Business Email Compromise
Press Release
Press Release

Agari Joins Microsoft Intelligent Security Association Program

FOSTER CITY, Calif. – May 15, 2019—Agari, the next-generation Secure Email Cloud that restores trust to the inbox, today announced that it has joined the Microsoft Intelligent Security Association. This is yet another step towards collaboration that will enable DMARC reporting capabilities for Microsoft Office 365 customers. “As a Microsoft Partner, Agari actively participates...
Blog
Blog

Quick, Urgent, Request: Agari Research Reveals Top Ten Subject Lines Used for BEC

Mon, 05/13/2019
You likely have a fraudulent email from a business email compromise (BEC) scammer sitting in your inbox, and you may not realize it. However, recent research from the Agari Cyber Intelligence Division (ACID) has shown that these advanced phishing attacks increasingly possess a handful of commonalities, making them easier to spot—which is good news considering their popularity...
ACID Research
Advanced Persistent Threats (APT)
Business Email Compromise
Blog
Blog

Current Email Architecture Transformation Raises the Bar for Security

Thu, 05/09/2019
Enterprise email architecture is evolving, which is good news for cybercriminals. Legacy secure email gateways (SEGs) simply don't provide full protection from today’s evolving and costly attacks, and cloud-based email requires a new security approach. In contrast, the next generation of email security—the AI-powered Secure Email Cloud—gives organizations more comprehensive...
Cloud Email Security
Email Security for MS Exchange
Email Security for Office 365
Blog
Blog

Protecting our Clients from Email Spoofing: Our DMARC Journey

Tue, 03/26/2019
This post originally appeared on the Armadillo Blog and has been lightly edited for clarity.   Most organisations have been successful in blocking malicious emails targeted at their employees, at least to some extent. Various on-premise and cloud providers exist to take care of anti-spam, anti-virus, reputation scores, and advanced features such as sandboxing of executables. As...
Cloud Email Security
DMARC Email Authentication
SPF
DKIM
Video
Video

Agari Identity Graph

Sat, 12/01/2018
    Transcript    The Agari Identity Graph is the AI-powering Agari Suite of advanced email security solutions, protecting your inbox from costly and damaging phishing schemes, account takeovers, and business email compromise attacks. The Graph leverages machine learning and makes over 300 million model updates each day, analyzing tens of billions...
Cloud Email Security
Email Security for G-Suite
Blog
Blog

Why are my Google Calendar Invites Blocked by DMARC?

Fri, 06/30/2017
Are you sending Google Calendar invites and not getting replies, or maybe your invitees tell you they tried to reply and it was blocked? Or maybe you are trying reply to Google Calendar invites and being blocked saying the mail is not accepted due to your domain's DMARC policy?This is an issue I have been seeing, so I did some digging and I have figured out what is going on....
Cloud Email Security
Email Security for G-Suite
Blog
Blog

Real Estate Email Scams - Don't Get Tricked!

Thu, 06/29/2017
Every year, more than 5 million homes are bought and sold in the U.S. Given this volume, it should come as no surprise that the real estate industry is a prime target for email-based crimes. Cyber criminals are spoofing (and in some cases taking over) the email accounts of real estate agents, title companies, and others involved in the home buying process. Once the criminal...
Advanced Persistent Threats (APT)
Consumer Phishing
Press Release
Press Release

New Cybersecurity Book Highlights Growing Threat of Social Engineering

Book Offers Tools and Techniques to Prevent Social Engineering-based Email Attacks SAN MATEO, Calif. – Dec. 13, 2016 – Agari, a leading cybersecurity company, today announced the release of a new book by Agari Chief Scientist Markus Jakobsson and other cybersecurity thought leaders, Understanding Social Engineering Based Scams. The book describes the increased use of social...
Blog
Blog

Don’t Let Your Customers Be Fooled By Cousin Domains

Tue, 12/15/2015
In the last five years, we’ve all become far too familiar with it – hackers spoofing a company’s domain and therefore tarnishing the brand, bad actors attempting to infect our computers with malware, and criminals sending millions of spam messages. As if this isn’t enough, now there is a whole group of people working to outsmart companies AND their customers by using cousin...
Cloud Email Security
DMARC Email Authentication
SPF
DKIM
Blog
Blog

What is Identifier Alignment?

Tue, 10/07/2014
When you begin to work with DMARC, you realize just how important identifier alignment is. Identifier alignment forces the domains authenticated by SPF and DKIM to have a relationship to the "header From" domain. Header From Domain and the MailFrom domain are different?Yes, they are! Hearing these terms can confuse people. They sound like the same thing, but in reality they are...
Cloud Email Security
DMARC Email Authentication
DKIM
Blog
Blog

What are the Differences Between DomainKeys (DK) and DKIM?

Tue, 09/16/2014
This is the second in a new ongoing series for us that gives you the tips and tricks you need for successful DMARC deployment . Read the previous tip here. DomainKeys Identified Mail (DKIM) is the successor to Yahoo DomainKeys. Both share similarities, however DKIM has the additional aspects of Cisco's Identified Internet Mail standard (IIM). The enhancements to this standard...
Cloud Email Security
DMARC Email Authentication
DKIM
Blog
Blog

DMARC is Transformational

Thu, 07/03/2014
The Benefits of Monitor Mode When a technology exists that can tell you if and when your domains are being spoofed (and by who), why would you not use it?! What is DMARC? DMARC was created to address some fundamental problems with existing email authentication technologies (SPF and DKIM). It provides feedback about your email authentication implementation and gives ISPs ...
Cloud Email Security
DMARC Email Authentication
SPF
DKIM