Ironscales

Ironscales IRONSCALES is the leader in AI-powered email security protecting over 17,000 global organizations. IRONSCALES is headquartered in Atlanta, Georgia.

IRONSCALES is the leader in AI-powered email security protecting over 15,000 global organizations from advanced phishing threats. As the pioneer of adaptive AI, we detect and remediate attacks like business email compromise (BEC), account takeovers (ATO), and zero-days that other solutions miss. By combining the power of AI and continuous human insights, we safeguard inboxes, unburden IT teams, an

d turn employees into a vital part of cyber defense across enterprises and managed service providers. To learn more, visit
www.ironscales.com
or follow us on X

06/26/2026

A construction bid invitation (mass-BCC) with a link labeled as a PDF. SPF/DKIM/ARC all passed.

But the URL went to a compromised third-party site, not a document. The label and the destination didn't match. That gap was the attack.

(Link to full teardown in comments)

06/25/2026

An ACH banking-change request from a compromised vendor account (in use since 2000). It passed auth.

The tell: the signature appeared twice, and the two phone numbers were one digit apart. One was fabricated.

(Link to full teardown in comments)

06/24/2026

A payroll request from a 'coworker.' Display name matched a real employee.

SPF/DKIM/DMARC passed (real Gmail). The only tell was behavioral: a free mailbox asking to change direct deposit.

(Link to full teardown in comments)

06/23/2026

A K-12 teacher got a one-line email: "Something that might spark your curiosity." Just a link.

SPF/DKIM/DMARC all passed (compromised M365 tenant). The link went to a domain registered 6 hours earlier on port 8443.

(Link to full teardown in comments)

How many minutes does your team spend per reported phish, end to end, from the moment it hits the queue to the moment it...
06/22/2026

How many minutes does your team spend per reported phish, end to end, from the moment it hits the queue to the moment it's pulled from every inbox?

The new Osterman report we commissioned put a clean number on the average cost to handle a single phishing email, which dropped 12% since 2022, from $31.32 to $27.51.

The report measures the full cost of a phishing email, the time from the moment someone spots a suspicious message to the moment it's completely removed from the environment. Average handling time dropped from 27.5 minutes in 2022 to 23.2 minutes in 2025, about 16% faster. Cost tracks time, so the average cost per email fell right alongside it.

Read the full report and check out this blog to calculate your own numbers. Link to the blog in the comments.

06/22/2026

A bank e-transfer alert with a 'voicemail' attached. SPF/DMARC passed.

But the file was HTML, not audio, and it said: call this number. No link to scan. The payload was a phone call.

(Link to full teardown in comments)

06/21/2026

A casual 're: plans for party' email from a compromised school account. SPF/DKIM/DMARC all passed; display name matched a known contact.

The one link pointed to a domain registered that morning, zero reputation history.

(Link to full teardown in comments)

06/20/2026

A link wrapped in a trusted security service. Failed SPF, DKIM, DMARC, yet landed at SCL -1.

The wrapper hid a 3-hop redirect to a credential page on a cloud-doc platform. Trusted infrastructure, weaponized.

(Link to full teardown in comments)

06/19/2026

Failed SPF, DKIM, and DMARC at the inbox. The gateway flagged it as phishing.

An allow-list delivered it anyway. No link, no attachment, just a number to call.

(Link to full teardown in comments)

06/18/2026

Law-firm document share. SPF, DKIM, DMARC all passed.

But the Review button went to a cleaning company's site, not the portal its tooltip claimed. Auth proves who sent it, not where the link goes.

(Link to full teardown in comments)

Address

6 Concourse Pkwy NE
Sandy Springs, GA
30328

Website

Alerts

Be the first to know and let us send you an email when Ironscales posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Ironscales:

Shortcuts

Share

Category