Blog

Blog

BEC Global Insights Report: April 2025

The monthly Global BEC Insights Report from Fortra presents a comprehensive analysis of the latest tactics, techniques, and procedures (TTP) employed by BEC threat actors. This report draws on extensive intelligence gathered from hundreds of active defense engagements conducted throughout the month. Key insights include geolocation data, attack volume, and the variety of scams, such as payroll diversion and advance fee fraud. The report also highlights the use of gift cards in scams, the requested amounts in wire transfer fraud, and the banks and webmail providers frequently targeted by attackers. These findings provide a critical understanding of the evolving BEC threat landscape.
Blog

PII vs. SPI: Protecting Sensitive Information

Learn the key differences between Personally Identifiable Information (PII) and Sensitive Personal Information (SPI), as well as their definitions, examples, and regulatory requirements. Understanding these distinctions is crucial for effective data protection and compliance with evolving privacy regulations.
Blog

Top Fraudulent Activity Targeting Retail on the Dark Web

Threat actors exploit the dark web to trade stolen data and illicit goods anonymously, often without the victim organization’s awareness. Malicious activity takes many forms across underground channels, but the technical barriers to accessing the dark web limit visibility — making it challenging to identify which assets may be exposed.If sensitive information is undetected on the dark web,...
Blog

What Is CUI Specified? Key Differences Explained

CUI Specified is info needing protection or control under specific laws, regulations, or government-wide policies.
Blog

What Is CUI Basic? Guidelines and Security Measures

Controlled Unclassified Information (CUI) is a sensitive data category that the United States federal government produces or interacts with.
Blog

RansomHouse Ransomware: What You Need To Know

What is RansomHouse?RansomHouse is a cybercrime operation that follows a Ransomware-as-a-Service (RaaS) business model, where affiliates (who do not require technical skills of their own) use the ransomware operator's infrastructure to extort money from victims. So they are a bog-standard ransomware gang?Not quite. Many ransomware operations encrypt and steal your data, demanding a ransom for a...