Inception Cyber | Intent-based Security

In today’s threat landscape, user trust in well-known services has become a prime attack surface. Emails originating from platforms like Asana, Abode Sign, or Dropbox Sign are ...

Detecting and Distinguishing AI-Generated Text from Human Written Text

Threat Research

Andrey Yakymovych

AI generated text (AIGT) has become increasingly prevalent in email communication due to the increased availability and integration of LLMs. Threat actors have also been taking ...

Andrey Yakymovych

Pushing Boundaries: A Personal Reflection on the SC Awards Recognition

Email Security Trends

I’m honored and humbled to be named a finalist for this year’s SC Awards in the category of Innovator, Executive, or Practitioner of the Year. This recognition is especially ...

Upcoming Presentation RSA 2025 Presentation: Leveraging Generative and Predictive AI to Detect AI Based Attacks

Threat Research

I am excited to announce I’ll be presenting our research on Leveraging Generative and Predictive AI for the Detection of AI-based Attacks on April 30th 1:50 PM - 2:10 PM PT in ...

From Voicemail to Compromised: How a Tiny HTM File Packs a Big Threat

Threat Research

Quick Read: Phishing Method: Uses a HTM attachment containing a redirector script. Evasions Redirects to a fake login page, requiring CAPTCHA verification. Detection Evasion: HTM ...

Attackers Are Outsmarting Traditional Security with Evasive Threats

Email Security Trends

In Q3 2024 alone, over 932,000 phishing attacks (source Anti-Phishing Working Group), were reported—a significant increase from the previous quarter. It's a stark reminder that ...

Deceptive Yet Detected: NACE Exposes SVG-Attachment Based Phishing Campaign

Threat Research

Quick Read: Phishing Strategy: Threat actors are leveraging SVG files embedded with JavaScript to bypass email security technologies and deliver phishing payloads directly to ...

Deep Dive: NACE Combats BEC Customer Impersonation Employing Combosquatting

Threat Research

Quick Read: BEC Strategy: Customer and Brand Impersonation Tactics Observed: Sender’s domain used combosquatting to impersonate a real brand. Hiding intended recipients by ...

What is Intent-Based Threat Detection for Email Security?

Email Security Trends

I’m often asked, “What is Intent-Based Detection?” My co-founder, Abhishek Singh, has written research papers and spoken at conferences extensively on this topic, but I wanted to ...

NACE vs. HTML Smuggling: Catching What Conventional Technology Misses

Threat Research

Quick Read: Phishing Strategy: Threat actor using HTML Smuggling to bypass email security and deliver phishing payloads directly to inboxes. Objective: The campaign aims to steal ...

Neural Analysis and Correlation Engine vs. AI Generated Attacks

Threat Research

Large language models have led to the emergence of AI tools that threat actors use to craft sophisticated attacks. Exploitation toolkits leveraging AI, such as WolfGPT, EscapeGPT, ...

Shray Kapoor, Principal Research Scientist Engineer

From Deception to Detection: Unmasking a Highly Targeted BEC Attack

Threat Research

Quick Read: BEC Strategy: Brand Impersonation / Fake customer Tactics Observed: Professional and Relevant Messaging: A well-written email with industry-specific content that ...

Shray Kapoor, Principal Research Scientist Engineer

3 + 1 = G-Suite Credential Phishing

Threat Research

v2 DocuSign-Themed Phishing Campaign Exploits Trust in Legitimate Platforms Quick Read:

Why Inception Cyber Stands Apart in Email Security

Phishing

This week, we published two blogs highlighting real-world email attacks caught by our platform. One attack targeted a CFO with a credential phishing attempt, while another ...

Shray Kapoor, Principal Research Scientist Engineer

Unmasking Vendor Registration Scams: Insights from Two Real-World BEC Cases

Threat Research

Quick Read: BEC Strategy: Vendor Impersonation & Fake Vendor Registration Tactics Observed: Use of free email providers to evade SPF, DKIM, sender domain, and IP reputation ...

Shray Kapoor, Principal Research Scientist Engineer

DocuSign-Themed Phishing Campaign Exploits Trust in Legitimate Platforms

Threat Research

Quick Read: Phishing Strategy: Impersonation of DocuSign through email and PDF attachment. Tactics Observed: No “To:” header in the email, leveraging SMTP envelope for delivery. ...

How a Sophisticated Credential Phishing Email Bypassed Google Workspace Filters

Threat Research

Phishing attacks continue to evolve in complexity, leveraging tactics to bypass even advanced email security solutions like Google Workspace (G-Suite) filters. In one of our ...

Neural Analysis and Correlation Engine vs. AI Generated Malware

In our blog, ‘Staying Ahead: Understanding the Latest Email Evasion Tactics,’ based on an analysis of the latest threats, we delve into the details of today’s malicious ...

InceptionCyber.ai to present research at AVAR 2024 & BlackHat MEA 2024

Threat Research

Transforming BEC Protection Against Generative AI Evasions with Deep Learning, Zero-Shot Classification, and Zero-Trust Principles

BEC

Rethinking Threat Prevention with an Evasion-first Mindset