DocuSign phishing ranks as top inbox threat, analysis finds (www.scworld.com)

A recent analysis by StrongestLayer has revealed that phishing attempts impersonating DocuSign have become the leading threat in corporate inboxes, making up 13.8% of attacks that successfully bypassed enterprise email security systems. This alarming trend highlights a critical gap in detection capabilities, especially as these attacks effectively circumvent robust defenses like those provided by Microsoft 365 and Mimecast. The sophistication of these phishing attempts lies in their diversity; they utilize varying infrastructures and tactics, making them difficult to trace or group, with an average similarity score of just 0.458 among attacks. The implications for the AI/ML community are substantial, as StrongestLayer suggests that 38% of these DocuSign impersonation attacks show signs of AI assistance, allowing for the creation of unique and contextually relevant phishing content. This versatility complicates traditional detection methods, which often rely on recognizing common patterns. The study underscores the need for improved content-based reasoning in threat detection, advocating for stricter email authentication measures like DMARC, while also emphasizing the importance of evaluating the intent behind emails rather than solely relying on their sender identity. As cyber threats evolve, the AI community must adapt to develop more robust defenses against these increasingly sophisticated phishing attacks.