Cofense Annual Report on the State of Email Security 2023

Keypoints

• Most cybersecurity vendor annual reports follow a structured format that includes an executive summary, threat landscape analysis, attack techniques, threat actor profiles, and recommendations for security improvements.
• These reports typically analyze significant statistical data, such as increases in malicious email volume, malware families, and attack vectors, providing insights into evolving cyber threats.
• In 2022, phishing expanded sharply, with Cofense Intelligence reporting a 569% increase in malicious phishing emails and a 478% increase in credential phishing-related threats, making it the top attack vector.
• Persistent malware families like Emotet and QakBot continued to dominate malware campaigns, with Emotet retaining its lead and QakBot showing a strong ability to bypass defenses and reach inboxes.
• Notable trend shifts include a 341% rise in the use of Web3 technologies and an 800% increase in exfiltration via Telegram bots, reflecting threat actors’ adaptation to new decentralized and communication platforms.
• Other recurring themes encompass the ongoing threat of Business Email Compromise (BEC), which caused billions in losses over eight years, and the impact of geopolitical events such as the Russia-Ukraine conflict, used as lures in phishing campaigns.
• These reports emphasize the importance of automation, human-vetted threat intelligence, and user awareness to combat the increasing sophistication and volume of phishing and malware attacks.
• They also highlight the need for organizations to stay updated on emerging attack techniques, including the bypassing of two-factor authentication (2FA) and the use of malicious HTML attachments.
• Overall, annual reports serve as comprehensive guides for understanding threat trends, prioritizing security investments, and shaping effective defense strategies in a rapidly evolving cyber landscape.