A new version of the Nymaim malware family targets high-level managers with attached malicious Word documents and installs ransomware and banking trojans on their machines. Services like ContentCatcher Detonator are a must have, where email attachments are executed in a safe environment so their activity can be reviewed and intentions verified. This puts information about the attachment into the hands of your company’s security administrator. Educating your end users is also an essential safety measure.
When dealing with financial requests via email, it is always good to verify multiple times that the vendor and or transactions are legitimate. Verify the accounts on both sides, call the vendor directly and confirm their request. The city of El Paso Texas was scammed out of $3 million through social engineering. A phish! This is happening more and more and is yet another example why user education is so important.
Anti-virus has proven ineffective as of late. It is not that Anti-virus does not work, the AV companies simply cannot keep up. It appears that the next-gen desktop engines are just now being released. On November 1st, 2016 Symantec released their new solution for the desktop called Endpoint Protection 14 and is available now. It looks promising.
Key features include:
Cut SOC alert fatigue by prioritizing business risk, correlating duplicate signals, and tuning false positives—so…
Build a lean security monitoring roadmap around 5–8 high-risk scenarios, minimum viable telemetry, alert ownership,…
Detect ransomware staging before encryption using identity, endpoint and backup signals to catch credential abuse,…
Make your SIEM, EDR and firewall stack deliver outcomes: assess provider depth, 30/60/90-day operations, detection…
Turn compliance logs into faster threat response. Learn how tuned detections, triage and proven escalation…
Turn hundreds of daily alerts into faster, risk-based decisions with asset context and correlation that…