MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
Attackers are conducting widespread token-spraying attacks against Microsoft 365 accounts to compromise corporate email for business email compromise (BEC) campaigns. The attacks combine phishing, stolen session tokens, and social engineering to breach corporate networks and email systems.
Account takeover attacks allow threat actors to impersonate legitimate users and organizations via compromised email accounts, bypassing traditional security controls. Attackers can then conduct fraud, theft, and malware distribution while appearing trustworthy, making detection difficult.
Interpol coordinated arrests of 1,462 cybercriminals across Africa, seizing $105M in assets. The crackdown targeted gangs behind online fraud, ransomware, and BEC attacks, demonstrating international law enforcement efforts against cybercrime.
AI agents with business system access face manipulation attacks similar to BEC, where attackers social engineer them like human victims. This emerging threat could enable fraudulent transactions and data theft as AI systems become more autonomous and integrated into workflows.
Black Axe cybercriminal gang members were extradited to the US to face charges related to romance scams, business email compromise (BEC), and money laundering. BEC attacks targeting financial transfers make this directly relevant to email security professionals.
Hackers hide Agent Tesla JScript malware behind Unicode emojis in BEC emails targeting finance teams. The obfuscated script mimics legitimate banking documents to evade detection and trick recipients into executing malware.
Researchers demonstrated how Microsoft Copilot in Microsoft 365 can be weaponized for business email compromise (BEC) and wire fraud. A single compromised employee account can escalate to CEO takeover and steal $250,000 with minimal attacker effort, posing significant risk to email security.
Attackers are combining evasion tactics including fileless techniques and loaders to deploy RATs and stealers in BEC phishing campaigns. This sophisticated approach achieves low detection rates, making it harder for email security systems to catch these threats before they reach users.
Researchers discovered ARToken, a business email compromise-as-a-service platform affiliated with EvilTokens phishing operation. The toolkit is designed to bypass MFA and compromise Microsoft 365 accounts, representing an advanced threat targeting organizations.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.