{
  "timestamp": "2025-02-05T22:32:39.744648",
  "content": "Search Free Trial Get Demo Secure Email Gateways Cost 3B Last Year  Phishing Attacks Are Still Evading Them June 4, 2020 Despite investing a record 3B in Secure Email Gateways SEGs in 2019, US companies still lost 1.7B to phishing . Heres how attackers use sophisticated tactics to bypass the SEG and trick users into taking the bait. Fooling the SEG Activating or uploading malicious content to a target web page only after the email has been scanned isnt a new scam. Advanced SEGs countered this tactic with time-of-click detection, which automatically rescans an email when the user clicks the link. It gives the SEG one last chance to detect a malicious URL. Related Block Evasive Phishing with Email Security Defense-in-Depth However, it is not without flaws. Spear phishing and Business Email Compromise BEC attacks dont contain URLs or attachments, so they appear harmless to the SEG. Once the tainted email has evaded the SEG, the user is the last line of defense. What it looks like Often a Business Email Compromise attack uses the organizations own internal communications to listen, learn, and execute a crime. The attacker might target and then observe the mailbox of a well-placed employee to learn when an executive is going on vacation, what payments are coming due, and who is responsible for vendor payments. This information can be used to plan a convincing wire fraud attack. Yes this happens. Fooling the user Evasion tactics trick users as well. 50 of users click on links because social engineering creates a sense of urgency, especially when cousin domains are used to obfuscate URLs Punycode attacks use foreign language characters that resemble English ones Attackers serve up local versions of a spoofed site, so the domain looks legitimate, but its not What it looks like Consider the employee who receives a vendor email saying a security vulnerability in the shadow application he is using has just been patched, so please click now to update and verify your ID. Not only does a counterfeit emailsite look and act like the real thing, it has all the expected security trappings. Even the most vigilant, security-trained users fall for these tricks. Fooling cybersecurity Bad actors even manage to evade detection by cybersecurity companies! They learn the IP address ranges of these companies and block the connection attempt. Or they change a couple of pixels in a fingerprinted image so tampering isnt detected. Target website HTML code is often obfuscated and encrypted. Its time to layer Inbox Detection and Response on top of SEGs Enterprises using cloud-hosted email urgently need an inner layer of email security called Inbox Detection and Response IDR. IDR solutions hook into users inboxes, and continuously scan all inbound and outbound emails in all folders. New from Cyren, this whitepaper provides best practices for implementing an IDR security layer. It explains how you can massively reduce the window of vulnerability caused by malicious emails lingering within the reach of users. Read the whitepaper Best Practices in Adaptive Security to Block Evasive Phishing Attacks Try it for Free Instant Data Classification Cyren URL Category Chacker Prev Canadian Phish Kits Reactivated as Tax-filing Deadlines are Moved Microsoft 365 Is Wildly Successful and Profoundly Vulnerable  Heres Why Next Company Partners Resources Investor Relations Products Freeware Demo Solutions Contact Us Privacy Management Service by Data443",
  "categories": [
    "product_security_features",
    "end_user_security",
    "security_best_practices",
    "threat_prevention",
    "technical_documentation"
  ],
  "raw_response": "product_security_features, end_user_security, security_best_practices, threat_prevention, technical_documentation"
}