What happened: Votiro’s Research Team has discovered a malicious macro that delivers a Dridex trojan payload hiding in Microsoft Excel spreadsheets delivered via phishing emails appearing to be from UPS, FedEx, and DHL. The Excel spreadsheet includes an obfuscated macro that launches PowerShell in hidden mode and downloads the payload from geronaga.com, a website that…
A Rich Text Format file (.RTF file) differs from a standard text file as it includes plain text and allows for additional data about formatting, fonts, images, and more. It is a universally accepted file format that is supported by a wide range of apps and is often used for cross-platform file sharing. This blog explains…
With remote and hybrid work models now the norm, zero trust is becoming more than a buzzword. Zero trust security is now mission-critical for all companies. Further, with the May 2021 Executive Order requiring Federal Civilian Executive Branch (FCEB) agencies to move to the cloud and adopt zero trust strategies, the Federal government is revolutionizing…
In the spring of 2021, Ireland’s public health system was targeted with a ransomware attack that resulted in widespread disruptions to patient care and hundreds of millions in costs. In a scathing post-mortem report, consulting firm PricewaterhouseCoopers found that the intrusion went undetected for two months before the threat actors dropped the ransomware payload. This…
While S3 buckets are commonly used across multiple industries and enterprises, their usage comes with risk, including malicious files being uploaded to these cloud-hosted repositories. In this blog post, we will explore the concept of S3 buckets, how they are being used, and some common security issues enterprises face when using S3. We will also…
Log4j is a logging framework for event recording – it can record user activity, data movement, and can track the exact date and time this happens. Log4j can be used for auditing and for troubleshooting. Logging is a fundamental piece of every software. Watch the video below or read the article for an overview of how…
Program will expand access to Votiro’s Positive Selection® technology that disarms file-borne threats before they infiltrate corporate networks NEW YORK, NEW YORK – December 8, 2021 – Votiro, a global leader in Content Disarm and Reconstruction technology, announced today its acceptance into the McAfee Enterprise Security Innovation Alliance (SIA). The SIA program is the security…
High-profile cyberattacks are continuously in the news, and more and more enterprises and organizations are looking to re-focus their security strategy from detection-based solutions to more proactive approaches, while keeping in mind the need for these security solutions to seamlessly integrate into business operations. The shift to integrate security into business and IT operations is…
Many industries and businesses allow – and even encourage – user-generated file uploads. Whether for health coverage, a mortgage, or an insurance policy, file uploads are essential. However, file uploads must be treated with caution, as they contain inherent risks. Read on to learn some of the file upload vulnerability mistakes you’re making, best practices…
With cyber-attacks and corporate data loss making headlines almost daily, businesses have no choice but to re-evaluate their defense methods and strategies in light of the constantly evolving threat landscape. This article explores the old-new technique of steganography, explains why taking solid anti-steganography security steps is critical for protecting against both incoming threats and outgoing…
