Thursday, February 22, 2024

198% Surge in Browser Based zero-hour Phishing Attacks

The digital landscape is under siege. Surging browser-based phishing attacks, a 198% increase in just the second half of 2023, paint a chilling picture of cyber threats outsmarting traditional security. 

Menlo Security’s 2023 State of Browser Security Report unveils this alarming trend, sounding the alarm for organizations and individuals alike.

Run Free ThreatScan on Your Mailbox

AI-Powered Protection for Business Email Security

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Try Trustifi Free Threat Scan with Sophisticated AI-Powered Email Protection .

The Rise of Evasive Attacks

Gone are the days of easily identifiable phishing scams. 

Cybercriminals are now armed with highly evasive techniques, bypassing conventional defenses like network filters and email scanners. 

These HEATs (Highly Evasive Adaptive Threats), making up 30% of all browser-based attacks, employ tactics like:

  • SMS Phishing (Smishing): Luring victims with seemingly legitimate text messages.
  • Adversary in the Middle (AITM): Intercepting and manipulating web traffic on the fly.
  • Image-Based Phishing: Embedding malicious code within seemingly harmless images.
  • Brand Impersonation: Mimicking trusted websites to steal login credentials.
  • Multi-Factor Authentication (MFA) Bypass: Finding ways to circumvent even two-factor security.

Traditional security, built for known threats, stumbles against the lightning speed of zero-hour attacks. 

These novel phishing campaigns, observed at over 11,000 in just 30 days, exploit the vast and vulnerable attack surface of modern browsers. 

Worryingly, 75% of these attacks hide on trusted websites, cloaked in a veneer of legitimacy.

Despite technological advancements, the human element remains the weakest link. 

Phishing preys on our inherent trust and cognitive biases, tricking us into divulging sensitive information. 

This makes browser security the ultimate line of defense, protecting users at the point of interaction with the web.

Menlo Security: Shining a Light on the Dark Web

The report paints a stark picture, but not a hopeless one. Menlo Security offers a beacon of hope with its advanced browser security solutions

Leveraging cutting-edge AI and machine learning, Menlo’s technology detects and thwarts even the most sophisticated evasive attacks.

Key Takeaways for a Safer Web:

  • Evasive threats demand a new approach: Traditional security falls short. Look to advanced browser security solutions powered by AI.
  • Zero-hour attacks lurk everywhere: Don’t let trusted websites lull you into a false sense of security. Remain vigilant and practice safe browsing habits.
  • Your browser is the frontline: Prioritize comprehensive browser security to shield yourself from evolving cyber threats

David Miller, Policy Advocate: “This report calls for increased collaboration between cybersecurity researchers, technology companies, and policymakers. We need to share threat intelligence, develop best practices, and create regulatory frameworks that incentivize stronger browser security measures.”

Organizations should adopt efficient incident response plans, regularly monitor email traffic for anomalies, and stay updated on emerging threats to stay ahead of the evolving email threat landscape with Trustifi AI-powered Email security solutions.


Latest articles

Beware of New AsukaStealer Steal Browser Passwords & Desktop Screens

An updated version of the ObserverStealer known as AsukaStealer was observed to be advertised as...

US to Pay $15M for Info About Lockbit Ransomware Operator Data

In a significant move against cybercrime, the U.S. government has announced a bounty of...

Earth Preta Hackers Abuses Google Drive to Deploy DOPLUGS Malware

Threat actors abuse Google Drive for several malicious activities due to its widespread use,...

Swiggy Account Hacked, Hackers Placed Orders Worth Rs 97,000

In a startling incident underscoring the growing menace of cybercrime, a woman's Swiggy account...

Beware of VietCredCare Malware that Steals businesses’ Facebook Accounts

A new cybersecurity threat targeting Facebook advertisers in Vietnam, known as VietCredCare, has emerged....

Google Chrome 122 Update Addresses Critical Security Vulnerabilities

Google has recently unveiled Chrome 122, a significant milestone for the widely used web...

New Malicious PyPI Packages Use DLL Sideloading In A Supply Chain Attack

Researchers have discovered that threat actors have been using open-source platforms and codes for...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Live Account Takeover Attack Simulation

Live Account Take Over Attack

Live Webinar on How do hackers bypass 2FA ,Detecting ATO attacks, A demo of credential stuffing, brute force and session jacking-based ATO attacks, Identifying attacks with behaviour-based analysis and Building custom protection for applications and APIs.

Related Articles