Resources

Blog
Blog

Ensuring DMARC Compliance for Third-Party Senders

Fri, 09/06/2019
Marketo. Salesforce. Eloqua. Bamboo HR. Zendesk. It only takes a minute to realize how much organizations love third-party senders. They are typically responsible for sending our important customer notifications, marketing promotions, prospecting emails, and even employee information. Because their mail is so important to your business, we should do what we can to help them become DMARC compliant...
Cloud Email Security
DMARC Email Authentication
Blog
Blog

Weaponizing Accounts Receivable

Tue, 07/23/2019
Receipts and invoices—two accounting powerhouses that require little introduction. But step a little further into the world of finance and accounts, and you can quickly become a fish out of water, as the terminology to this numerical land seems to multiply exponentially. That said, in some of our recent active defense engagements with BEC cybercriminals, we have observed a new way scammers are...
Advanced Persistent Threats (APT)
Business Email Compromise
Blog
Blog

From One to Many: Scattered Canary Evolves from One-Man Startup to BEC Enterprise

Tue, 06/04/2019
There is no denying that business email compromise (BEC) is big business, with losses exceeding a billion dollars in the United States in the last year alone. Globally, BEC attacks have cost more than $13 billion in the last five years. Chances are likely that you’ve probably been a recipient of one of these social-engineered emails yourself. But the question remains… who is behind these...
ACID Research
Advanced Persistent Threats (APT)
Business Email Compromise
Blog
Blog

Quick, Urgent, Request: Agari Research Reveals Top Ten Subject Lines Used for BEC

Mon, 05/13/2019
You likely have a fraudulent email from a business email compromise (BEC) scammer sitting in your inbox, and you may not realize it. However, recent research from the Agari Cyber Intelligence Division (ACID) has shown that these advanced phishing attacks increasingly possess a handful of commonalities, making them easier to spot—which is good news considering their popularity. There are more BEC...
ACID Research
Advanced Persistent Threats (APT)
Business Email Compromise
Blog
Blog

The Time is Now: Underscoring the Importance of DMARC for State and Local Governments

Wed, 04/17/2019
Scammers know that impersonating a trusted government agency is an extremely effective way to trick or scare victims into handing over money, personal data, or sensitive information. In many cases, it’s all too easy for cybercriminals to use the agency’s own domains to send authentic-looking phishing emails to constituents and contractors. That’s why the Department of Homeland Security announced...
Cloud Email Security
DMARC Email Authentication
Blog
Blog

Why iTunes? A Look into Gift Cards as an Emerging BEC Cash Out Method

Wed, 03/27/2019
One of the trends that has been slowly creeping up across the BEC threat landscape is that actors are using other techniques in order to get money outside of an organization. While a traditional BEC attack includes instructions for wiring money outside of the organization, more and more actors are asking for a large number of gift cards instead of the classical request of “Please wire $30,000 to...
Advanced Persistent Threats (APT)
Business Email Compromise
Blog
Blog

Protecting our Clients from Email Spoofing: Our DMARC Journey

Tue, 03/26/2019
This post originally appeared on the Armadillo Blog and has been lightly edited for clarity. Most organisations have been successful in blocking malicious emails targeted at their employees, at least to some extent. Various on-premise and cloud providers exist to take care of anti-spam, anti-virus, reputation scores, and advanced features such as sandboxing of executables. As a service provider...
Cloud Email Security
DMARC Email Authentication
SPF
DKIM
Blog
Blog

New “BEC-as-a-Service” Trend Means Just About Anyone Can Launch an Attack

Tue, 01/22/2019
Business email compromise (BEC) fraud is a lucrative venture, and now that industry is expanding in a troubling way—by lowering the barrier to entry so that anyone with a couple hundred bucks can outsource a BEC attack. BEC criminals are organized, behaving in many ways like legitimate businesses . And just like any successful company in a growing industry, these criminals are looking to add...
Advanced Persistent Threats (APT)
Business Email Compromise
Cloud Email Security
Blog
Blog

M&As Put Your Company at Risk for BEC Losses and Data Breach Liability

Thu, 01/17/2019
Mergers and acquisitions can build your company's value overnight, but business email compromise (BEC) and data breaches can tear it down just as quickly. Too often, M&A announcements are followed by waves of BEC attacks against the companies involved, or by news that the target company was the victim of a data breach. To get the most value from a merger or acquisition, you need to know how to...
Advanced Persistent Threats (APT)
Business Email Compromise
Data Breach
Spear Phishing
Cloud Email Security
Blog
Blog

The ROI of Protecting Your Brand, Customers and Partners from Phishing

Thu, 10/25/2018
Over the past 6 months, 100% of Agari customer brands and more than 80% of their domains have been the target of consumer phishing or B2B phishing attacks impersonating their brand to commit fraud. While the cost of phishing attacks isn't always visible, there are very real costs to businesses in the form of email deliverability, brand value and fraud costs. The root cause of this problem is that...
Cloud Email Security
DMARC Email Authentication
Press Release
Press Release

Agari Fall '18 Release Completes First and Only Fully Automated Advanced Email Security Solution Powered by Al

FOSTER CITY, Calif. – September 20, 2018 – Agari, the only cloud-native solution that uses predictive AI to stop advanced email attacks, today announced its Fall ‘18 Release, a series of breakthrough enhancements for the Agari Email Trust Platform ™ -- the industry’s only fully automated advanced email security solution powered by artificial intelligence. Agari Customer Protect ™, which safeguards...
Press Release
Press Release

Agari Summer '18 Release Extends Protection against Advanced Deception Attacks

FOSTER CITY, Calif., June 13, 2018 – Agari, a leader in Identity Deception Protection solutions, today announced its Summer ’18 Release, which extends the protection of the Agari Email Trust Platform™ against advanced identity deception attacks. Major enhancements in this release include attachment analysis for improved account takeover detection, an interactive threat taxonomy for granular attack...
Video
Video

Account Takeover: The Evolution of Advanced Cyberattacks

By Markus Jakobsson
Targeted email attacks continue to escalate as organizations deal with increasing numbers of phishing, spear phishing and ransomware attempts. But another attack vector—account takeovers—is affecting 44% of organizations and is posing a significant risk. Watch this webinar to learn how: These attacks lead to large-scale data breaches and financial losses; How organizations can identify account...
Advanced Persistent Threats (APT)
Ransomware
Spear Phishing
Blog
Blog

Email Phishing Scam Continues to Target College Students

Thu, 02/22/2018
According to a public service announcement issued by the FBI, college students across the United States continue to be targeted in a common email phishing scam that lures students in with the promise of employment. It works like this: email Scammers advertise phony job opportunities on college employment websites or students receive emails on their student accounts recruiting them for fictitious...
Advanced Persistent Threats (APT)
Spear Phishing
Advanced Threat Protection
Anti-Phishing
Blog
Blog

Real Estate Email Scams - Don't Get Tricked!

Thu, 06/29/2017
Every year, more than 5 million homes are bought and sold in the U.S. Given this volume, it should come as no surprise that the real estate industry is a prime target for email-based crimes. Cyber criminals are spoofing (and in some cases taking over) the email accounts of real estate agents, title companies, and others involved in the home buying process. Once the criminal gains access, he or she...
Advanced Persistent Threats (APT)
Consumer Phishing
Blog
Blog

Email Headers Explained: Understanding Email Header Information

Wed, 07/27/2016
With the surge of phishing and other advanced email attacks, you can’t be too careful when it comes to your inbound email messages. Beyond viewing the basic information provided, you should make it a habit of viewing and understanding your emails' full headers.
Cloud Email Security
DMARC Email Authentication
Blog
Blog

Security Professional Pain Points – and How to Solve Them

Fri, 05/20/2016
Ask any security professional what the number one pain point is within their organization, and chances are they’ll say ‘user behavior’…with ‘malware’ coming in as a very close second. And while these issues are very different on the surface, they do have one thing in common: both are often the cause of high-profile data breaches, largely in part to the increased use of spear phishing email...
Advanced Persistent Threats (APT)
Spear Phishing
Advanced Threat Protection
Anti-Phishing
Cloud Email Security
Press Release
Press Release

How to Become Unphishable

As phishing attacks continue unabated, vendors and banks alike are scrambling to find better solutions. In a warning issued this week, the FBI said it’s seen a 270% increase in identified victims and exposed losses due to business email compromise since January 2015. Business email compromise or “CEO fraud” phishing targets businesses that frequently perform wire transfers. Perpetrators compromise...
Press Release
Press Release

New Cybersecurity Book Highlights Growing Threat of Social Engineering

Book Offers Tools and Techniques to Prevent Social Engineering-based Email Attacks SAN MATEO, Calif. – Dec. 13, 2016 – Agari , a leading cybersecurity company, today announced the release of a new book by Agari Chief Scientist Markus Jakobsson and other cybersecurity thought leaders, Understanding Social Engineering Based Scams . The book describes the increased use of social engineering for email...
Blog
Blog

Don’t Let Your Customers Be Fooled By Cousin Domains

Tue, 12/15/2015
In the last five years, we’ve all become far too familiar with it – hackers spoofing a company’s domain and therefore tarnishing the brand, bad actors attempting to infect our computers with malware, and criminals sending millions of spam messages. As if this isn’t enough, now there is a whole group of people working to outsmart companies AND their customers by using cousin domains to fool...
Cloud Email Security
DMARC Email Authentication
SPF
DKIM