From trust to trickery: Brand impersonation over the email attack vector
Summary: Cisco Talos documented brand impersonation techniques in phishing emails, including logos embedded as plaintext HTML, base64-encoded bodies, HTML tables, remotely fetched images, and image or PDF attachments such as a Bluebeam QR code phishing email. In data from March 22 to April 22, 2024, Microsoft was the most frequently impersonated brand, followed by DocuSign, with NortonLifeLock, PayPal, Chase, Geek Squad and Walmart mostly seen in callback phishing messages.
What's compelling: Attackers are impersonating the brands your employees and customers already trust, and Talos notes that telling fake emails from legitimate ones now demands more time and effort from humans and even security researchers.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026