image credit: Pixabay

BEC explodes as attackers exploit email’s identity crisis

October 9, 2019

850,000 domains worldwide now have DMARC records, a 5x increase since 2016, according to Valimail.

However, less than 17% of global DMARC records are at enforcement — meaning fake emails that appear to come from those domains are still arriving in recipients’ inboxes.

Among large companies, only one in five enterprise DMARC records is at enforcement, a significant factor in the wild success of business email compromise (BEC) attacks, which has produced more than $26 billion in losses in the past three years.

Read More on Help Net Security