What happened: Votiro’s Research Team has discovered a malicious macro that delivers a Dridex trojan payload hiding in Microsoft Excel spreadsheets delivered via phishing emails appearing to be from UPS, FedEx, and DHL. The Excel spreadsheet includes an obfuscated macro that launches PowerShell in hidden mode and downloads the payload from geronaga.com, a website that…
Recently the news has been full of high-profile cyber attacks perpetrated through an email phishing technique called Vendor Email Compromise. A VEC attack is when a hacker hijacks a legitimate email account to send malicious messages to an innocent victim. As the originating email comes from a trusted partner or supplier – and often contains…
Our CEO and founder Aviv Grafi was featured on Patrick Grey’s Risky Biz podcast, along with GreyNoise Intelligence’s Andrew Morris and MergeBases’ Oscar van der Meer. Throughout the discussion, Grafi explained topics such as using CDR to defend against macro threats. He also described a recent example of vendor email compromise, shared how Votiro differentiates…
This blog will define the concept of document sanitization and explain why document-based security challenges are especially significant in the current business climate. The blog will then do a deep dive into three industries – healthcare, insurance and the financial sectors – to explore the document-related challenges within each of these industries, and highlight how…
It seems as if news of another malware or ransomware attack surfaces every day. From the ransomware attack against defense contractor CPI to an Emotet campaign impersonating the Democratic National Committee, 2020 was booming with malware and ransomware incidents. Unfortunately, sophisticated and devastating malware and ransomware attacks will likely increase throughout 2021 as threat actors…
When we think of ransomware attacks, we often assume the attacker gained access to the enterprise network via a phishing email. However, there are a variety of other attack vectors bad actors are currently leveraging to carry out ransomware attacks that can be incredibly damaging to an organization. Recent research from Rhino Security Labs shows…
Modern business processes rely on sharing information across the cloud. Your users are emailing documents and uploading files to shared drives as part of their jobs. Ensuring safe, secure, clean files is now mission-critical. Employees know that they shouldn’t open attached files when they don’t know the person sending them, but phishing emails aren’t the…
Revolutionary technology recognized for ability to proactively eliminate all known and unknown threats hidden in files NEW YORK, NEW YORK – March 23, 2021 – Votiro, a global leader in Positive Selection® technology, today announced their receipt of four awards, attesting to the company’s proven ability to protect enterprise networks from weaponized files. Votiro has…
Partnership Empowers Global Enterprises, Eliminating File-Borne Threats and Enhancing Security Infrastructures NEW YORK, NEW YORK – March 18, 2021 – Votiro, a global leader in Positive Selection® Technology, today announced a strategic partnership with Gotham Technology Group, a leading technology solutions provider in the Northeastern United States, expanding access to Votiro’s Positive Selection® technology and…
As organizations look to enhance their data security programs, they need to start thinking “outside the network.” Whether maintaining an in-office, remote, or hybrid workforce, companies increasingly find that traditional network security, like firewall policies, no longer provides a complete data security solution. As malicious actors seek to find new exploits, organizations need ways to…