SP Guard – Page 12

Google Discovers — People

Google, in association with the University of California, San Diego, has released research which analyses spearphishing attacks against gmail accounts from 2011-2014. The researchers found that the success of a spearphishing attacks ranged from a low of 3% to a high of 45%. The researchers determined that the greater the effort put into the targeting of the message, the higher the probability of a successful attack. The researchers made this observation regarding financial scam attacks: Thus, despite the appearance of simplicity, in reality, the scam emails are well-formed and thought-out in a way to maximize efficiency by preying on known human physiological [...]

rpziconix2017-01-07T17:35:14-05:00November 14th, 2014|Consumers and Email, Cybersecurity - General, Iconix Truemark Service, Phishing, SP Guard, spear phishing|

Iconix YouTube Channel – New Video

We have posted a new video about our Truemark service for consumers on our YouTube Channel. You can also view our videos on our Film Festival Page.

rpziconix2017-01-07T17:35:14-05:00November 6th, 2014|Consumers and Email, Cybersecurity - General, Iconix Truemark Service, Phishing, SP Guard, spear phishing|

National Cyber Security Awareness Month (NCSAM)

Today is the last day of National Cyber Security Awareness Month (NCSAM). We thought that the October 29, 2014, alert from ICS-CERT about the vulnerabilities of the US infrastructure highlighted both the complexity and simplicity of the problem. In Alert ICS-ALERT-14-281-01A ICS-CERT warns: ICS-CERT has identified a sophisticated malware campaign that has compromised numerous industrial control systems (ICSs) environments using a variant of the BlackEnergy malware. Analysis indicates that this campaign has been ongoing since at least 2011. Multiple companies working with ICS-CERT have identified the malware on Internet-connected human-machine interfaces (HMIs). How is this sophisticated malware introduced into industrial control systems? It [...]

rpziconix2017-01-07T17:35:14-05:00October 31st, 2014|Cybersecurity - General, Phishing, SP Guard, spear phishing|

New App Note – Security Company

We have just published an app note which explains how a leading cybersecurity company improved its email communications and security using SP Guard. Before using SP Guard deceptive spearphishing emails were interfering with customer service email communications. Using SP Guard to differentiate real emails from attacks, customer service and security were improved. You can download the app note for free from our White Papers page.

rpziconix2017-01-07T17:35:14-05:00October 29th, 2014|Consumers and Email, SP Guard, spear phishing|

Iconix YouTube Channel — More Videos

We have posted two more videos on our YouTube Channel. In “Fighting Phishing” we how you can take the email interface back from attackers. In “The Inbox That Works” we demonstrate the Truemark service for consumers.

rpziconix2017-01-07T17:35:14-05:00October 21st, 2014|Consumers and Email, Email Marketing, Iconix Truemark Service, SP Guard, spear phishing|

FBI Director Discusses Cyber Attacks

On October 5, 2014, FBI Director James Comey discussed cyber espionage with Scott Pelley of CBS 60 Minutes. At 8:50 Director Comey discusses cyber security. Scott Pelley: What countries are attacking the United States as we sit here in cyberspace? James Comey: Well, I don't want to give you a complete list. But I can tell you the top of the list is the Chinese. As we have demonstrated with the charges we brought earlier this year against five members of the People's Liberation Army. They are extremely aggressive and widespread in their efforts to break into American systems to [...]

rpziconix2017-01-07T17:35:14-05:00October 7th, 2014|Cybersecurity - General, SP Guard, spear phishing|

Are Next Generation Firewalls Dead?

Seculert is reporting on a simple technique that defeats sandbox protection. Seculert has identified Sazoora.B, a new version of the Sazoora.A Trojan. Among other things, what makes Sazoora.B new is that it waits 15 minutes before becoming active. The significance of this simple idea is that during this dormant phase the Trojan is undetectable. TechTarget SearchSecurity elaborates on this delay feature: Many times, systems will delay delivering an email or connecting to a webpage until a file has successfully passed the sandbox. By delaying execution by, say, 15 minutes, the target's malware analysis potentially could time out and the malware [...]

rpziconix2017-01-07T17:35:14-05:00October 1st, 2014|Cybersecurity - General, SP Guard, spear phishing|

Iconix YouTube Channel – 3rd Video

We have posted our third video on our YouTube channel. In this video, we discuss using SP Guard to help your cyber sentries tell good guys from bad guys. Cyber sentries? Yes. APT attackers use email to infiltrate systems -- turning every email user into a cyber sentry. Of course, please check out our YouTube channel.

rpziconix2017-01-07T17:35:14-05:00October 1st, 2014|Cybersecurity - General, SP Guard, spear phishing|

Iconix YouTube Channel – 2nd Video

We have posted our second video on our new YouTube channel. In this video, we discuss using SP Guard to identify attacks before systems are compromised. You see us discuss time fairly often. This is because APT is a race -- it is a race between the spies trying to exfiltrate information and the defenders seeking to stop the spies before the exfiltration. As the United States Senate told us earlier this week, the spies are winning this race. Of course, please check out our YouTube channel.

rpziconix2017-01-07T17:35:14-05:00September 23rd, 2014|Cybersecurity - General, SP Guard, spear phishing|

U.S. Senate Reports on APT

On September 17, 2014, the Senate Armed Services Committee released a declassified version of its report Inquiry into Cyber Intrusions Affecting U.S. Transportation Command Contractors. In the report the Committee detailed intrusions into key US defense transportation assets. This passage from page viii is representative of the Committee's findings. What is the sophisticated cyber method used by these APT actors? Spearphishing. The classic cyber-intrusion method in which the attacker sends the intended victim a deceptive email. Taking the action called for in the deceptive email initiates a chain of events which compromises systems. After this chain of events is initiated, cyber defenders [...]

rpziconix2017-01-07T17:35:14-05:00September 23rd, 2014|Cybersecurity - General, SP Guard, spear phishing|