Connect with us

Technology

Business Email Compromise (BEC) Impersonation: The Weapon of Choice of Cybercriminals, Finds VIPRE’s Q3 2024 Email Threat Report

Published

2 years ago

on

BEC attacks targeting the manufacturing sector increase to 10%; use of attachments is getting ‘sneakier’; and Redline is the malware family of the quarter.

LONDON, Oct. 28, 2024 /PRNewswire/ — VIPRE Security Group, a global leader and award-winning cybersecurity, privacy, and data protection company, has released its Q3 2024 Email Threat Trends Report, shedding light on the evolving cybersecurity landscape. This comprehensive analysis of real-world data reveals the sophisticated strategies and techniques employed by cybercriminals, with a particular persistent focus on the highly lucrative tactic of business email compromise (BEC). VIPRE processed 1.8 billion emails globally, of which 208 million were malicious.

BEC impersonation weaponisation  

In this third quarter of 2024, cybercriminals intensified their efforts to exploit organisational vulnerabilities through employee deception. BEC scams surged, accounting for 58% of phishing attempts. Notably, 89% of these BEC attacks involved impersonation of authority figures, including CEOs, senior executives, and IT staff, underscoring the sophisticated tactics employed by malicious actors.

BEC aims for the manufacturing sector

The manufacturing sector saw a significant rise in BEC attacks, potentially driven by financial fraud. These incidents increased from just 2% in Q1 to 10% in Q3 this year. This rise may be attributed to the industry’s widespread use of mobile sign-ins at various worksites. Employees accessing systems “on the go”, often under pressure to meet production deadlines, are more susceptible to phishing attempts.

Subtler tactics are a larger threat

Email threats in Q3 were dominated by scams (34%), commercial spam (30%), and phishing (20%). These email threats overshadowed ransomware and malware combined, which comprised less than 20% of all email attacks. Interestingly, despite their lower prevalence, ransomware and malware continue to receive disproportionate attention from the cybersecurity industry.

Sneakier attachments

To counter advancing email security solutions, criminals are deploying increasingly more intricate methods to bypass defenses. Attackers are employing sneakier techniques such as disguising malicious attachments as voicemail recordings or critical security updates to lure unsuspecting users into downloading them.

Additionally, Microsoft PDFs and .DOCX files remain the most common forms of malicious attachments. In Q3 2024, 2.18 million emails were detected containing harmful attachments, marking a 30% increase from the previous quarter’s 21% attachment-based attacks.

Phishing links and compromised websites

Cybercriminals continue to favour the URL redirection technique, a tactic that typically proves effective at evading security controls. This deceptive ploy utilises a “clean” URL within the body of the email, which then redirects unsuspecting users to a malicious one once inside. In Q3 2024, URL redirection accounted for 52% of such attacks, leading victims to meticulously crafted fraudulent websites designed to appear authentic, and gain trust.

Malspam pendulum swing from malicious links to attachments

When it comes to malspam, there is a pendulum swing from a preference for malicious links to attachments. During Q3, malspam efforts were centered on malicious attachments (64%), while only 36% employed a link. The attachment formats used were predominantly LNK, ZIP, and DOCX. Only a quarter ago, links were the tool of choice by a factor of nearly nine-to-one (86% links to 14%).

The ‘Malware Family of the Quarter’ goes to Redline

Redline is the top malspam family of Q3 2024, a spot it has maintained since the corresponding quarter in 2023. RedLine is designed to steal sensitive information from web browsers, such as credentials and payment data. Typically distributed via phishing emails or malicious websites, it sends stolen data to a command-and-control server controlled by the attacker. It can completely take over a compromised machine and uses multiple infiltration methods.

“The findings of this report yet again illustrate the sophistication of criminal tactics. BEC email and phishing attacks are becoming more targeted and convincing,” Usman Choudhary, CPTO, VIPRE Security Group, says. “Additionally, malware distribution through malicious spam campaigns continues to pose a serious threat to organisations. These findings stress the critical need for robust cybersecurity measures and ongoing employee education to combat these evolving threats, especially as bad actors gear up for the upcoming holiday season – Black Friday, Thanksgiving, Christmas, and New Year.”

To read the full report, click here: VIPRE’s Email Threat Trends Report: Q3 2024. 

VIPRE leverages its vast understanding of email security to equip businesses with the information they need to protect themselves. This report is based on proprietary intelligence gleaned from round-the-clock vigilance of the cybersecurity landscape.

About VIPRE Security Group

VIPRE Security Group, part of Ziff Davis, Inc., is a leading provider of internet security solutions purpose-built to protect businesses, solution providers, and home users from costly and malicious cyber threats. With over 25 years of industry expertise, VIPRE is one of the world’s largest threat intelligence clouds, delivering exceptional protection against today’s most aggressive online threats. Our award-winning software portfolio includes next-generation antivirus endpoint cloud solutions, advanced email security products, along with threat intelligence for real-time malware analysis, and security awareness training for compliance and risk management. VIPRE solutions deliver easy-to-use, comprehensive layered defense through cloud-based and server security, with mobile interfaces that enable instant threat response. VIPRE is a proud Advanced Technology Partner of Amazon Web Services operating globally across North America and Europe.

The group operates under various brands, including VIPRE®, StrongVPN®, IPVanish®, Inspired eLearning®, Livedrive®, and SugarSync®. www.VIPRE.com

 

View original content:https://www.prnewswire.co.uk/news-releases/business-email-compromise-bec-impersonation-the-weapon-of-choice-of-cybercriminals-finds-vipres-q3-2024-email-threat-report-302287491.html

Related Topics:
Continue Reading

Technology

ST Engineering iDirect and MBSat Partner to Build Next-Generation Sovereign Connectivity Services Across Oman and the Middle East

Published

4 hours ago

on

October 25, 2026

By

Intuition ground system selected to support MBSat’s planned 2027 service launch, enabling accelerated deployment, dynamic resource management and scalable service growth

HERNDON, Va., Oct. 25, 2026 /PRNewswire/ — ST Engineering iDirect today announced a strategic partnership with Mohammed Al Barwani Satellite Company (MBSat), part of Mohammed Al Barwani Group, to provide the ground system technology foundation for MBSat’s next-generation satellite gateway and network operations across Oman and the wider Middle East region. Intuition will provide a flexible, software-defined foundation to support sovereign connectivity services, enabling efficient service deployment, dynamic resource management and scalable network operations.

Intuition will deliver a turnkey ground segment solution that accelerates deployment, simplifies operations and gives MBSat the flexibility to scale services as demand grows. The software-defined platform enables dynamic resource management, service automation and seamless integration with existing and future operational systems. The solution also includes Ka-band gateway infrastructure, service provisioning and management capabilities, open API integration frameworks, training and full-lifecycle support. Together, these capabilities will help MBSat launch and operate services efficiently while adapting to evolving market requirements.

The network will leverage capacity from MB Sat-1, a sovereign MicroGEO satellite, with planned service launch in 2027, to support flexible, scalable connectivity services across the region.

The partnership reflects growing investment in sovereign communications infrastructure across the Middle East as operators seek greater control over service delivery, network expansion and long-term technology evolution.

“This partnership represents an important milestone in our efforts to build an advanced satellite communications platform in Oman and the region,” said Ammar Al Rawahi, General Manager, MBSat. “Through our collaboration with ST Engineering iDirect, we are establishing the technical infrastructure required to launch services efficiently, respond to evolving customer needs and expand into new markets, supporting the sustainable long-term growth of our business.”

“We are providing MBSat with a flexible, software-defined ground platform that integrates with its existing operational environment,” said Sridhar Kuppanna, Chief Executive Officer, ST Engineering iDirect. “This enables more efficient service deployment and operations today, with the flexibility to scale, introduce new capabilities and evolve as requirements change.”

About ST Engineering iDirect

ST Engineering iDirect, a subsidiary of ST Engineering, is a global leader in satellite communications, providing technology and solutions that enable its customers to expand their business, differentiate their services and optimize their networks. Through its portfolio of ground infrastructure, intelligent networking and advanced satellite communications solutions, the company supports operators, service providers, governments and enterprises worldwide.

View original content to download multimedia:https://www.prnewswire.com/news-releases/st-engineering-idirect-and-mbsat-partner-to-build-next-generation-sovereign-connectivity-services-across-oman-and-the-middle-east-302918467.html

SOURCE ST Engineering iDirect

Continue Reading

Technology

ST Engineering iDirect and MBSat Partner to Build Next-Generation Sovereign Connectivity Services Across Oman and the Middle East

Published

4 hours ago

on

October 25, 2026

By

Intuition ground system selected to support MBSat’s planned 2027 service launch, enabling accelerated deployment, dynamic resource management and scalable service growth

HERNDON, Va., Oct. 25, 2026 /PRNewswire/ — ST Engineering iDirect today announced a strategic partnership with Mohammed Al Barwani Satellite Company (MBSat), part of Mohammed Al Barwani Group, to provide the ground system technology foundation for MBSat’s next-generation satellite gateway and network operations across Oman and the wider Middle East region. Intuition will provide a flexible, software-defined foundation to support sovereign connectivity services, enabling efficient service deployment, dynamic resource management and scalable network operations.

Intuition will deliver a turnkey ground segment solution that accelerates deployment, simplifies operations and gives MBSat the flexibility to scale services as demand grows. The software-defined platform enables dynamic resource management, service automation and seamless integration with existing and future operational systems. The solution also includes Ka-band gateway infrastructure, service provisioning and management capabilities, open API integration frameworks, training and full-lifecycle support. Together, these capabilities will help MBSat launch and operate services efficiently while adapting to evolving market requirements.

The network will leverage capacity from MB Sat-1, a sovereign MicroGEO satellite, with planned service launch in 2027, to support flexible, scalable connectivity services across the region.

The partnership reflects growing investment in sovereign communications infrastructure across the Middle East as operators seek greater control over service delivery, network expansion and long-term technology evolution.

“This partnership represents an important milestone in our efforts to build an advanced satellite communications platform in Oman and the region,” said Ammar Al Rawahi, General Manager, MBSat. “Through our collaboration with ST Engineering iDirect, we are establishing the technical infrastructure required to launch services efficiently, respond to evolving customer needs and expand into new markets, supporting the sustainable long-term growth of our business.”

“We are providing MBSat with a flexible, software-defined ground platform that integrates with its existing operational environment,” said Sridhar Kuppanna, Chief Executive Officer, ST Engineering iDirect. “This enables more efficient service deployment and operations today, with the flexibility to scale, introduce new capabilities and evolve as requirements change.”

About ST Engineering iDirect

ST Engineering iDirect, a subsidiary of ST Engineering, is a global leader in satellite communications, providing technology and solutions that enable its customers to expand their business, differentiate their services and optimize their networks. Through its portfolio of ground infrastructure, intelligent networking and advanced satellite communications solutions, the company supports operators, service providers, governments and enterprises worldwide.

View original content to download multimedia:https://www.prnewswire.com/news-releases/st-engineering-idirect-and-mbsat-partner-to-build-next-generation-sovereign-connectivity-services-across-oman-and-the-middle-east-302918467.html

SOURCE ST Engineering iDirect

Continue Reading

Technology

Global Security & Technology Summit Unveils Month-Long Program of Activities Ahead of December Event

Published

11 hours ago

on

October 24, 2026

By

RIYADH, Saudi Arabia, Oct. 24, 2026 /PRNewswire/ — The Organizing Committee of the Global Security & Technology Summit (GSTS) held an introductory session today at the Ministry of Interior’s headquarters in Riyadh, bringing together representatives from the government, private, and nonprofit sectors to introduce the program of activities leading up to the summit. The upcoming summit will be held in Riyadh under the patronage of HRH Prince Mohammed bin Salman bin Abdulaziz Al Saud, Crown Prince and Prime Minister, under the supervision of HRH Prince Abdulaziz bin Saud bin Naif bin Abdulaziz Al Saud, Minister of Interior, and organized by the Ministry of Interior in cooperation with Tuwaiq Academy.

During the session, the Organizing Committee presented the comprehensive GSTS program, comprising three key components: GSTS Month, running from November 1 to 30, 2026; the Global Security & Innovation Fair (SAIF), taking place from November 24 to 26, 2026; and the main Summit, scheduled for December 18 to 20, 2026, in Riyadh. Together, these events form an integrated program designed to advance security and technology innovation, strengthen national capabilities, and foster international cooperation.

GSTS Month will feature working groups, boot camps, training programs, knowledge-sharing sessions, and technical workshops across Saudi Arabia’s 13 administrative regions, delivered both in person and remotely in collaboration with specialized entities. The month-long program aims to develop national capabilities, identify emerging talent, enrich knowledge-sharing opportunities, and equip professionals with the knowledge and skills needed to develop innovative solutions to future security and technology challenges.

The main Summit will bring together global leaders, decision-makers, experts, and innovators to explore the future of security and technology, promote the integration of advanced technologies within the security sector, strengthen national capabilities, support innovation, and foster international cooperation, further positioning the Kingdom as a global hub for security and technology.

Showcasing the latest technological breakthroughs and security solutions, the summit will bring together government entities, private sector organizations, academic institutions, and research centers to facilitate knowledge exchange and collaboration across key fields, including cybersecurity, artificial intelligence (AI), the Internet of Things (IoT), smart security solutions, emerging technologies, and crisis management. The program will also feature main sessions, specialized discussions, and interactive exhibitions. Registration is available at gsts.sa.

Advisor to HRH the Minister of Interior and Chairman of the GSTS Organizing Committee, Ahmed Altowayan, stated that the summit builds on Saudi Arabia’s efforts to establish an advanced security and technology ecosystem focused on knowledge and innovation, keeping pace with rapid developments and future challenges.

Mr. Altowayan noted that the summit is a global platform for strengthening cooperation and exchanging expertise, anticipating future developments in security and technology, and developing strategic partnerships and innovative solutions that enhance the efficiency and readiness of security systems.

Vice Chairman of the GSTS Organizing Committee, Eng. Abdulaziz Alhammadi, said that the summit will offer a range of integrated programs and activities focused on enhancing national skills, encouraging innovation, and supporting international cooperation.

He added that GSTS Month will help build national capabilities, discover talent, and develop skills, with SAIF providing a platform for innovators and researchers from around the world to showcase leading technological solutions, while the main Summit will bring together leaders and experts to discuss the future of security and technology and explore new strategic partnership opportunities.

SAIF will take place at the Riyadh International Convention & Exhibition Center, bringing together innovators, researchers, technology talents, and industry experts from around the world to showcase promising innovations and projects across 14 fields of technology and innovation. The fair will provide opportunities to engage with project owners, including students, graduates, and entrepreneurs, and explore the different stages of innovation development through interactive zones, panel discussions on emerging security and innovation trends, and knowledge-sharing workshops led by specialists. Visitor registration is open to participants from within and outside the Kingdom through saifair.sa.

The introductory session also featured contributions from representatives of government, private, and nonprofit sector entities, alongside members of the media. Discussions focused on developing national capabilities in security and technology, strengthening students’ technical expertise, translating scientific research into practical solutions, and supporting Saudi companies in developing security and technology solutions and advancing digital transformation.

Organized by the Ministry of Interior in cooperation with Tuwaiq Academy, GSTS is produced by Tahaluf, with the Ministry of Education serving as Strategic Scientific Partner, Tahakom as Founding Partner, and Elm as Principal Partner.

Registration for participants from within and outside the Kingdom is available at gsts.sa.

Click here to view the media kit. 

View original content to download multimedia:https://www.prnewswire.co.uk/news-releases/global-security–technology-summit-unveils-month-long-program-of-activities-ahead-of-december-event-302918695.html

Continue Reading

Trending