Tech
‘Dual-channel’ attacks are the new face of BEC in 2026 | Computer Weekly
So-called ‘dual-channel’ attacks using multiple methods of communication either simultaneously or in sequence are becoming more prevalent as digital fraudsters seek out new ways to defeat cyber protections against business email compromise (BEC) scams, according to new data from security services supplier LevelBlue.
BEC attacks – which spoof trusted entities, often c-suite executives, then use their identities to convince victims to transfer money into the attackers’ pockets – have long been a bugbear for enterprise defenders.
“[BEC] continues to be one of the costliest cyber attacks as reported by the FBI’s IC3, with over $2.7bn (£2bn) in adjusted losses in 2024 alone,” wrote LevelBlue researcher Katrina Udquin.
“BEC attacks are not slowing down, and fraudsters continue to evolve their scamming techniques and arsenal,” she said.
According to LevelBlue, last year its systems observed a significant increase in BEC attacks in which the initial lure was a request for contact, seeking to establish the potential victim’s mobile number or personal email address. A total of 43% of lures that it saw took this form, compared to 31% which took the form of a more traditional request for a payroll transfer, and 10% which asked for invoice payments or wire transfers.
Such request for contact lures are very often a precursor to a dual-channel attack seeking to move the conversation to an alternative platform.
LevelBlue’s systems tallied over 5,000 unique dual-channel attacks in 2025, and found that in 66% of them, the cyber fraudsters tried to move the conversation to traditional SMS messaging, in 32% of cases to messaging applications such as WhatsApp, and in 2% of cases to personal email addresses.
The rationale behind this tactic is a relatively simple one – external mobile networks, messaging applications and personal email addresses will in almost all circumstances fall well beyond the purview of any enterprise IT security department.
Done successfully, a dual-channel attack renders expensive email protection services basically useless, meaning all security teams can do is hope that the social engineering modules of their cyber training courses have been effective.
Related to this, LevelBlue said it also observed an increase in callback phishing, in which the criminals encourage their mark to reach out first by contacting a specified malicious phone number. This tactic more than doubled in popularity during 2025. Callback phishing is effective because it relies heavily on authority bias and a sense of urgency, exploiting people’s tendency to take messages or instructions from people in positions of authority seriously.
Emerging trends
According to LevelBlue’s data – gleaned largely from its proprietary MailMarshal defence service – 2025 saw a number of other notable trends developing in the BEC sphere.
Among these were the emergence of longer-form BEC emails. While BEC spam has traditionally been rather concise, more longer, well-crafted messages are now increasingly being seen, likely a result of cyber fraudsters trying to make their emails more elaborate and more authentic. Often, said LevelBlue’s researchers, longer emails appear to be being generated with the ‘help’ of generative artificial intelligence (GenAI) large language models (LLMs).
The past 12 months also saw a spike in attacks using multiple-personas and crafted email threads, where the victim appears to be copied in on an ongoing email chain. This tactic has been well-used for the past four or five years by nation-state threat actors targeting individuals of interest, such as academics, activists, diplomats, journalists or politicians, but is now spreading among financially-motivated groups, too.
In a criminal context multiple-persona impersonation and email threads seem to be being used predominantly in invoice payment fraud, with the spoofed identities often including the victim’s third-party suppliers.
Preventing BEC: Back to basics
Although cyber criminal tactics around BEC are clearly evolving, defenders can take solace from the fact that the best ways to protect against it are tried and tested.
Naturally, it remains an absolute imperative that staff across the organisation are educated on how to identify potential BEC spam email indicators.
Beyond this, security teams should ensure that they work with compliance and financial colleagues to ensure the organisation performs rigorous identification and verification checks when making external payments.
Finally, limiting access controls to organisational systems, records and documentations, and protecting these with multifactor authentication (MFA) as standard, can inhibit the risk of data theft.
Tech
Everything Is Content for the ‘Clicktatorship’
In President Donald Trump’s second term, everything is content. Videos of immigration raids are shared widely on X by the Department of Homeland Security (DHS), conspiracy theories dictate policy, and prominent right-wing podcasters and influencers have occupied high-level government roles. The second Trump administration is, to put it bluntly, very online.
Trump and his supporters have long trafficked in—and benefited from—misinformation and conspiracy theories, leveraging them to build visibility on social media platforms and set the tone of national conversations. During his first term, Trump was famous for announcing the administration’s positions and priorities via tweet. In the years since, social media platforms have become friendlier environments for conspiracy theories and those who promote them, helping them spread more widely. Trump’s playbook has adjusted accordingly.
Don Moynihan, a professor of public policy at the University of Michigan, says that social media, particularly right-wing social media ecosystems, are no longer just a way for Trump to control conversations and public perception. The administration, he says, is now actively making decisions and shaping policy based primarily on how they’ll be perceived online. Their priority is what right-wing communities care about—regardless of whether it’s real.
WIRED spoke to Moynihan, who argues that the US has entered a new level of enmeshment between the internet and politics, in what he calls a “clicktatorship.”
This conversation has been edited for length and clarity.
WIRED: To start us off, what is the “clicktatorship”?
Don Moynihan: A “clicktatorship” is a form of government that combines a social media worldview alongside authoritarian tendencies. This implies that people working in this form of government are not just using online platforms as a mode of communication, but that their beliefs, judgement, and decisionmaking reflect, are influenced by, and are directly responsive to the online world to an extreme degree. The “clicktatorship” views everything as content, including basic policy decisions and implementation practices.
The supply of a platform that encourages right-wing conspiracies and the demand of an administration for people who can traffic in those conspiracies is what’s giving us the current moments of “clicktatorship” that we’re experiencing.
The “clicktatorship” is generating these images to justify the occupation of American cities by military forces, or to justify cutting off resources to states that did not support the president, to do things that would have truly shocked us a decade ago.
Trump’s first presidency was characterized by a sort of showmanship. How is that different from what we’re seeing now?
The first Trump presidency might be understood as a “TV presidency,” where watching The Apprentice or Fox News gave you real insight into the milieu in which Trump was operating. The second Trump presidency is the “Truth Social or X presidency,” where it is very hard to interpret without the reference points of those online platforms. Some of the content and messaging that the president or other senior policymakers use is stuffed with inside references, messaging that doesn’t make a lot of sense unless you’re already in that online community.
Modes of discourse have also changed. We’re seeing very senior policymakers exhibit the patterns and habits that work online. Pam Bondi going to a Senate hearing with a list of zingers and printed out X posts as a means of responding to a traditional accountability process, reflects how this online mode of discourse is shaping how public officials view their real life roles.
There’s been a lot of research about the polarizing and harmful nature of social media. What does it mean that our political leaders are people who have not only been successful in manipulating social media, but have themselves been manipulated by it?
Tech
Dozens of ICE Vehicles in Minnesota Lack ‘Necessary’ Lights and Sirens
More than two dozen Immigration and Customs Enforcement vehicles on the ground in the Minneapolis-St. Paul area “currently lack the necessary emergency lights and sirens” required to be “compliant with law enforcement requirements,” according to a contract justification published in a federal register on Tuesday.
The document justifies ICE paying Whelen Engineering Company, a Connecticut-based firm specializing in “emergency warning and lighting technology,” $47,330.49 for 31 “ATLAS1” kits—seemingly a typo of ATLAS, the name of the product sold by Whelen—which the company’s website describes as an “Adaptable Travel Light and Siren Kit.” The document explains that the ATLAS Kits would “allow vehicles to be immediately operational and compliant with law enforcement requirements to support the current surge operation” out of Homeland Security Investigations (HSI)’s St. Paul office, which conducts operations in Minnesota, North Dakota, South Dakota.
“These vehicles were deployed prior to being permanently retrofitted and currently lack the necessary emergency lights and sirens required for operational use,” the document says.
The document also says that because of the “the time-sensitive nature of the mission” that HSI agents are conducting, having to wait for “permanent retrofitting” the agency vehicles with lights and sirens “would negatively impact operational readiness, law enforcement officer safety, and public safety.”
HSI’s most recent public handbook for agents conducting “emergency driving”—defined as driving during “official duties,” like low- or high-risk pursuits, that may require breaking speed limits or violating certain traffic laws—appears to have been published in 2012. It says that any HSI vehicles without lights and sirens “may not be used” in emergency driving, unless the officer “is conducting surveillance or is responding to an event that may adversely impact or threaten life, health, or property or requires an immediate law enforcement response.”
The handbook adds that if an HSI officer is emergency driving but their vehicle does not have lights or sirens, they “must terminate” their participation in a law enforcement operation, and an officer from another law enforcement agency that does have lights and sirens should take over. This HSI officer ”may continue to assist in a backup role, if necessary.”
The handbook does not specify the exact number or location of lights that have to be on an emergency vehicle, but it says that officers are responsible for reviewing any state statutes for emergency lights and sirens where they operate. Minnesota state law requires law enforcement and emergency drivers to “sound an audible signal by siren” and have at least one red light on the front of the vehicle, among other stipulations.
According to the listing for the ATLAS Kit on Whelen’s website, the kit includes several items that are also sold separately by the company, including lightheads and lightbars, as well as a siren amplifier and speaker. The kit comes in a portable case resembling a wheeled suitcase and a small device with a microphone and buttons for controlling the other items in the kit. Whelen describes ATLAS as being “designed for quick installation” for any vehicle, regardless of make or model” and ideal for “on-the-go law enforcement.”
The listing comes six days after ICE officer Jonathan Ross fatally shot 37-year-old Renee Nicole Good in her car in Minneapolis, sparking massive protests and an influx of right-wing influencers trying to capitalize on the chaos. After Department of Homeland Security secretary Kristi Noem announced that hundreds of additional ICE officers would join the 2,000 already in the Minneapolis area, the State of Minnesota and the cities of Minneapolis and St. Paul filed a federal lawsuit against DHS and its top officials, asking the judge to halt the federal immigration enforcement operation underway in the state.
Tech
Microsoft Has a Plan to Keep Its Data Centers From Raising Your Electric Bill
Microsoft said on Tuesday that it would be taking a series of steps towards becoming a “good neighbor” in communities where it is building data centers—including promising to ask public utilities to set higher electricity rates for data centers.
Speaking onstage at an event in Great Falls, Virginia, Microsoft vice chair and president Brad Smith directly referenced a growing national pushback to data centers, describing it as creating “a moment in time when we need to listen, and we need to address these concerns head-on.”
“When I visit communities around the country, people have questions—pointed questions. They even have concerns,” Smith said, as a slide showed headlines from various news outlets about opposition to data centers. “They are the type of questions that we need to heed… We are at a moment of time when people have a lot on their mind. They worry about the price of electricity. They wonder what this big data center will mean to their water supply. They look at this technology and ask, what will it mean for the jobs of the future? What will it mean for the adults of today? What will it mean for their children?”
The announcement follows a post from President Donald Trump on Truth Social Monday in which he pledged that his administration would work with “major American Technology Companies,” including Microsoft, to make sure that data centers don’t inflate customer utility bills.
“We are the ‘HOTTEST’ Country in the World, and Number One in AI,” Trump wrote in the post, in which he also accused Democrats of being responsible for the rise in utility bills. “Data Centers are key to that boom, and keeping Americans FREE and SECURE but, the big Technology Companies who build them must ‘pay their own way.’”
Average electricity bills have risen faster than inflation in recent years in many parts of the country. These price hikes are due to a variety of factors, including the costs of repairing and maintaining the country’s aging electric grid. But higher demand for electricity—including from data centers, which can also be expensive to connect to the grid—plays a role. As technology companies and utilities are predicting a massive new need for energy from the nationwide data center buildout, the Energy Information Administration projects that electric bills will keep increasing through 2026.
Concerns around data centers and electricity bills played a key role in several local and state midterm elections last year, while research released last fall shows that local opposition to data centers skyrocketed in the second quarter of 2025, leading to billions of dollars in projects stalled or cancelled. The political divide against data centers appears to be bipartisan. In recent months, influential former Trump strategist Steve Bannon has begun speaking against the energy and water costs of data centers on his War Room podcast, part of a larger pushback from some MAGA figureheads against the AI buildout in the US.
The Trump administration, by contrast, has made expediting the data center buildout in the US a key priority. It has removed a variety of environmental protections for data centers, including water protections, expedited the review of chemicals involved in their use, and encouraged their development on federal land. The Department of Energy has also instructed the Federal Energy Regulatory Commission, which oversees interstate transmission, to work on a suite of issues around data centers and the grid.
Microsoft, which has around 100 data centers planned or under construction across the country, has met with some local pushback to some of its projects. In October, the company canceled plans for a data center in Wisconsin due to local opposition; the group leading the charge against that project warned of a potential “5-15% rate hike to subsidize cheap power.” The company revealed last week that it was also behind a proposed project in Michigan, which was put on hold in December following concerns from community members. Hundreds of residents attended a planning commission meeting for the project Monday night, with many telling local media they were there to express opposition.
-
Entertainment1 week agoMinnesota Governor Tim Walz to drop out of 2026 race, official confirmation expected soon
-
Sports1 week agoVAR review: Why was Wirtz onside in Premier League, offside in Europe?
-
Business1 week ago8th Pay Commission: From Policy Review, Cabinet Approval To Implementation –Key Stages Explained
-
Politics6 days agoUK says provided assistance in US-led tanker seizure
-
Entertainment6 days agoDoes new US food pyramid put too much steak on your plate?
-
Entertainment6 days agoWhy did Nick Reiner’s lawyer Alan Jackson withdraw from case?
-
Business6 days agoTrump moves to ban home purchases by institutional investors
-
Sports1 week agoFACI invites applications for 2026 chess development project | The Express Tribune
