62% of phishing emails successfully bypass DMARC verification checks
A recent report from Darktrace analyzed a staggering 17.8 million phishing emails. Shockingly, it revealed that 62% of these emails successfully passed domain-based message authentication, reporting, and conformance (DMARC) verification checks. Even more concerning is that over a third of these fraudulent emails managed to dodge detection by major email providers, with 56% outsmarting existing security measures.
The report shines a light on the evolving tactics of malicious actors, who are now utilizing sophisticated tactics to sidestep traditional security controls. These cybercriminals are increasingly exploiting legitimate third-party platforms and services to camouflage themselves within legitimate web traffic. The report also highlights a rising trend in the use of covert command and control mechanisms such as remote monitoring and management (RMM) devices, tunneling, and proxy services.
During the period between January and June 2024, the report identified the following as the most prevalent threats:
- Malware for information theft (29% of initial investigations)
- Trojans (15%)
- Remote access trojans (12%)
- Botnets (6%)
- Loaders (6%)
