Account takeover continues to be one of the fastest growing email security threats, but attackers are starting to adapt, introducing new ways to exploit compromised accounts.
Teaming up with leading researchers at UC Berkeley and UC San Diego, Barracuda researchers uncovered a new and growing type of account takeover attack: lateral phishing. The study found that 1 in 7 organizations experienced lateral phishing attacks over the past seven months.
Of the organizations that experienced lateral phishing, more than 60 percent had multiple compromised accounts. Some had dozens of compromised accounts that sent lateral phishing attacks to additional employee accounts and users at other organizations. In total, researchers identified 154 hijacked accounts that collectively sent hundreds of lateral phishing emails to more...