US Finance Under Phishing Pressure: What the SOC Data Reveals?

This report examines rising phishing pressure on US financial organizations using ANY.RUN telemetry, highlighting high phishing prevalence (e.g., 58% of finance submissions are emails, 14.8% malicious), common phishing kits (Tycoon2FA, Sneaky2FA, EvilProxy, ClickFix, Eviltokens), and operational impacts on SOCs (24% higher workload, faster detection and investigation needs). It outlines attacker techniques including credential and session compromise (e.g., Mirage2FA), the national-scale financial impact (BEC losses cited), and recommends detection and mitigation through interactive sandboxing and threat intelligence integration.