dcsimg

5 Email Campaigns Evading In-Market Security Solutions

  • 5 Email Campaigns Evading In-Market Security Solutions-

    Service-DHL Campaign

    In this campaign, attackers attempted to install a RAT (remote access Trojan) used to steal credentials and take screenshots) from the well-documented NetWire malware family. This malware has been used in both targeted attacks and crime campaigns, which are directed at multiple recipients with the goal of probing weak spots that can be used for future exploits.

    The campaign targeted an organization for over a month, sending two malicious emails to 29 unique recipients within the organization. Some received an email that contained an HTML file, while the remainder received an email that contained a ZIP file.

1 | 2 | 3 | 4 | 5 | 6 | 7

5 Email Campaigns Evading In-Market Security Solutions

  • 1 | 2 | 3 | 4 | 5 | 6 | 7
  • 5 Email Campaigns Evading In-Market Security Solutions-5

    Service-DHL Campaign

    In this campaign, attackers attempted to install a RAT (remote access Trojan) used to steal credentials and take screenshots) from the well-documented NetWire malware family. This malware has been used in both targeted attacks and crime campaigns, which are directed at multiple recipients with the goal of probing weak spots that can be used for future exploits.

    The campaign targeted an organization for over a month, sending two malicious emails to 29 unique recipients within the organization. Some received an email that contained an HTML file, while the remainder received an email that contained a ZIP file.

Email is still the primary attack vector for many cybercriminals. In addition to malicious attachments and URLs, credential phishing is also on the rise and placing everyday users at the root of the attack. Why? Cybercriminals are using advanced attack methods that are consistently evading traditional detection tools. As such, organizations are beginning to realize that these advanced attacks can only be detected through multi-dimensional behavioral analytics that operate on diverse data sources and use a full spectrum of machine learning techniques.

Over a two-month period, security analytics firm Niara worked with customers to analyze email traffic and found a number of malicious email campaigns that sophisticated attackers were using to circumvent traditional defenses in order to gain a foothold within the enterprise and steal sensitive information. This slideshow presents five of the malicious email campaigns detected. Niara has also identified the tools, techniques and procedures used in each, which can be used to determine if your organization has been targeted by any of these campaigns.