What happened: Votiro’s Research Team has discovered a malicious macro that delivers a Dridex trojan payload hiding in Microsoft Excel spreadsheets delivered via phishing emails appearing to be from UPS, FedEx, and DHL. The Excel spreadsheet includes an obfuscated macro that launches PowerShell in hidden mode and downloads the payload from geronaga.com, a website that…
In order to conduct business operations efficiently and effectively, organizations need to be able to transfer files to relevant parties. That includes transferring files internally between departments, such as Human Resources sending tax forms completed by a new hire to Finance, or sending and receiving files from external sources and third-parties. Many organizations rely on…
The email channel is one of the most essential components of effective corporate communication. Email is vital to keeping business flowing amongst colleagues, clients, vendors, and others. In fact, the total number of business and consumer emails sent and received per day exceeded 293 billion in 2019. This is forecasted to grow to more than…
Segmented off from the rest of the operating system, the sandbox is the place to poke, prod, and generally test suspicious incoming files in a relatively safe environment before allowing them to enter the rest of the system. Sandboxes provide one the most rudimentary forms of defense against file-borne malware. Like the security screening at…
Content Disarm and Reconstruction, Content Disarm and Reconstruct, and CDR are all terms used for a technology that can eliminate all file-borne threats. In this article, we provide an overview of what CDR is, how it’s used, the history and evolution of the technology, its pros and cons, and how a new technology—Positive Selection technology—takes…
The increased digital accessibility of the health insurance system in recent years has come with many benefits, such as easier procurement of coverage, more efficient insurance transactions, transparency in billing and lower costs – but it has also increased insurers’ exposure to cyber-attacks by overwhelming percentages. Cybersecurity and its threat to the healthcare insurance industry…
Like many industries, insurance companies are in midst of a digital transformation, adopting new channels and services in order to conduct their business virtually and enhance their customers’ experiences. Digital claims, mobile apps, connection to the Internet of Things (IoT), and strategic integrations with third-party portals all open the door to cyber criminals looking to…
Businesses need to allow employees to use productivity tools to maintain effective operations. Unfortunately, many of these efficiency-drivers are easily compromised by threat actors, as we saw with the Dridex trojan payload hiding in Excel spreadsheets delivered via phishing emails with senders posing as UPS, FedEx, and DHL. In fact, efficiency efforts can drive security…
What are DICOM files? A DICOM file is an image from a medical scan saved in the Digital Imaging and Communications in Medicine (DICOM) format. DICOM is the international 30-year-old standard protocol for managing and transmitting medical images, such as ultrasounds, MRIs, X-rays, and CT scans. In addition, these files often include the patient’s identification…
In 2021, it is forecasted that one organization will experience a ransomware attack every 11 seconds. The plethora of security vulnerabilities within enterprises’ networks, coupled with the ease of luring employees into engaging with spear phishing emails, are primary reasons why ransomware attacks have rapidly increased. One recent attack against a food and drink manufacturer…