Skip to content

Criminal hackers step up use of innovative methods to bypass security measures in Business Email Compromise (BEC) attacks

Cybercriminals are employing a model of cybercrime-as-a-service to bolster their industrial-scale operations, and they are capitalizing on the use of residential IP addresses in the process.

Criminal hackers escalate use of innovative strategies to bypass security, leading to an increase...
Criminal hackers escalate use of innovative strategies to bypass security, leading to an increase in Business Email Compromise (BEC) attacks

Criminal hackers step up use of innovative methods to bypass security measures in Business Email Compromise (BEC) attacks

In the digital age, cyber threats have become a constant concern for businesses worldwide. One such threat that has been on the rise is the Business Email Compromise (BEC) attacks. These attacks, which target senior executives and financial managers, have become more frequent and sophisticated, causing significant financial losses.

One factor contributing to this trend is the industrialization of the cybercrime economy. CaaS (Cyber as a Service) platforms, such as BulletProfitLink, have emerged as a significant player in this landscape. BulletProfitLink, with its decentralized gateway design that utilizes public blockchain nodes, makes it harder for authorities to disrupt these operations.

BEC attacks often involve hackers masking the origin of attacks to evade detection. They use residential internet protocol addresses to make the attacks appear locally generated. This tactic, combined with the use of phishing services like Evil Proxy, Naked Pages, and Caffeine, helps launch phishing campaigns on an industrial scale.

These executives, who may have access to sensitive information like employee tax statements, Social Security numbers, and other PII, are prime targets for these attacks. The FBI reported over 21,830 complaints about BEC attacks in 2022, with adjusted losses of over $2.7 billion.

Microsoft's Digital Crimes Unit data shows a 38% increase in cybercrime targeting business email between 2019 and 2022. This alarming statistic underscores the need for businesses to be vigilant and take measures to protect themselves from these attacks.

The cybercriminal groups behind BulletProfitLink, however, remain unidentified in public sources. Since 2019, BEC attacks have been reported tens of thousands of times globally, with significant increases over the last decade.

As the "as a service" model has impacted various sectors, it has also influenced cybercrime. Criminal groups are now offering services to anyone willing to pay, making it easier for them to launch attacks on businesses.

In conclusion, the increasing sophistication and frequency of BEC attacks pose a significant threat to businesses worldwide. Understanding the role of CaaS platforms like BulletProfitLink and taking proactive measures to protect against these attacks is crucial for businesses to safeguard their sensitive information and maintain their financial stability.

Read also:

Latest