Finance departments process a constant stream of invoices, contracts, payment notices, and procurement emails, making email one of the most common initial access vectors for threat actors. According to Cofense, attackers exploit those workflows with phishing emails that resemble legitimate business correspondence rather than relying on urgency-based lures. Such phishing emails are also likely to bypass AI-based secure email gateways (SEGs) and other email security technologies. Threat actors understand that employees in financial services organizations … More
The post Finance phishing works because it sounds boringly normal appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Threat actors are posing as AI crawlers to hunt for exposed credentials
Anthropic locks out Claude users after infostealers hijack login sessions
Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails