Kaseya promotes INKY to detect stealthy email account takeover
Original title: When the attacker becomes the user: Rethinking account takeover
The sponsored piece says attackers linger in inboxes, then phish customers and suppliers from trusted accounts that ordinary filters accept.
A sponsored Register article quotes Kaseya’s Dave Baggett on attackers who obtain email credentials, often through phishing aided by generative AI, then wait before joining real conversations. Compromised accounts can be used for outbound phishing of customers and suppliers who trust the sender, including when a senior identity is impersonated. The piece promotes INKY, Kaseya’s generative AI email tool, which profiles senders and writing style to flag anomalies. The excerpt cuts off while describing containment after a takeover.
- Baggett says attackers now watch mail instead of immediately sending spam.
- INKY uses sender profiling, stylometry and machine learning to spot tone changes.
- MFA on one organization does not cover third parties’ login practices.
- The text says senior mail is often allowed through filters with less friction.
From the original article
7 min read at theregister.comIn a world full of cyber risk, account takeover has emerged as one of the most insidious of all threats. If an attacker can successfully compromise a legitimate email account, they are then able to pose as a trusted individual or organization without triggering any warnings. Traditional email security will see nothing wrong.
By Guy Matthews · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.