Increase in Business Email Compromise

There has been an increase in business email compromise, with threat actors leveraging sophisticated phishing pages to proxy users through the back-end authentication system. This allows them to obtain session tokens and bypass multi-factor authentication. Stolen credentials from business process outsourcing and IT vendors are specifically targeted to gain administrative access to downstream victim networks. This has led to an increase in ransomware attacks and extortion attempts.