LevelBlue Blog
Tag: Phishing
A Look at the Social Engineering Element of Spear Phishing Attacks
October 21, 2024 | David Balaban
When you think of a cyberattack, you probably envision a sophisticated hacker behind a Matrix-esque screen actively penetrating networks with their technical prowess. However, the reality of many attacks is far more mundane. A simple email with an innocent subject line such as “Missed delivery attempt” sits in an employee’s spam folder. They open it absentmindedly,… Read more →
Here’s How Phishing Messages Break Through Email Filters
August 27, 2024 | David Balaban
The content of this post is solely the responsibility of the author. LevelBlue does not adopt or endorse any of the views, positions, or information provided by the author in this article. Phishing is an email-borne malicious technique aimed at learning the sensitive credentials of users or spreading malware. This practice has been on the list of the… Read more →
The State of Phishing-Resistant MFA
August 13, 2024 | Sarah Lefavrais
The content of this post is solely the responsibility of the author. LevelBlue does not adopt or endorse any of the views, positions, or information provided by the author in this article. In our increasingly interconnected world, the specter of cybercrime looms larger than ever, casting a shadow over people, businesses, and governments alike. Among the slew of… Read more →
Business Email Compromise (BEC): Tracking a Threat Actor’s Funny Business
June 24, 2024 | Michael Venturella
Executive Summary In a recent LevelBlue incident response engagement, an analyst in our managed detection and response (MDR) security operations center (SOC) responded to an alarm that was triggered by a suspicious email/inbox rule. The rule aimed to conceal responses to an internal phishing attempt from the account user, so the attacker could solicit funds from the company's… Read more →
Social engineering attacks: Real-life examples and how to avoid them
January 10, 2024 | Kushalveer Singh Bachchas
The content of this post is solely the responsibility of the author. LevelBlue does not adopt or endorse any of the views, positions, or information provided by the author in this article. In the ever-evolving landscape of cybersecurity threats, social engineering remains a potent and insidious method employed by cybercriminals. Unlike traditional hacking techniques that exploit software vulnerabilities,… Read more →