What happened: Votiro’s Research Team has discovered a malicious macro that delivers a Dridex trojan payload hiding in Microsoft Excel spreadsheets delivered via phishing emails appearing to be from UPS, FedEx, and DHL. The Excel spreadsheet includes an obfuscated macro that launches PowerShell in hidden mode and downloads the payload from geronaga.com, a website that…
Thales TCT is a trusted provider of cybersecurity solutions for US federal defense, intelligence, and civilian agencies. Last year, TCT implemented Votiro in their infrastructure to strengthen their network against zero-day attacks in files and to help them meet CMMC and NIST-800-171 requirements. In April 2020, TCT partnered with Votiro to bring the benefits of…
It seems like every day a news headline announces another company experiencing a ransomware attack. As ransomware becomes more pervasive, it also becomes more destructive, leading to business interruption that impacts customers and supply chains. By understanding how ransomware manages to evade detection, organizations can move towards the only cure for ransomware: prevention. Understanding the…
With more staff working from home than ever before, enterprises have faced unprecedented risks in securing employees’ home offices and personal devices. This blog explores the multiple weak spots in file security strategies that exist with this model, both due to human error and to technological gaps. We will also introduce the security technology, content…
Throughout the week of May 10, 2021, headlines thrived on the havoc a ransomware attack against Colonial Pipelines wrought across the United States. As people rushed to gas stations, some filling plastic bags with gasoline, the federal government declared a state of emergency. As ransomware continues to plague public and private organizations, taking a deep…
Ransomware continues to plague companies as the remote and hybrid workforce models leave new attack vectors. Research notes a 715% year-over-year increase in ransomware during 2020. Now that most disaster recovery and business continuity plans include robust data backup strategies, cyber attackers use a combined ransomware approach that both encrypts data and steals data. The…
Recently the news has been full of high-profile cyber attacks perpetrated through an email phishing technique called Vendor Email Compromise. A VEC attack is when a hacker hijacks a legitimate email account to send malicious messages to an innocent victim. As the originating email comes from a trusted partner or supplier – and often contains…
Our CEO and founder Aviv Grafi was featured on Patrick Grey’s Risky Biz podcast, along with GreyNoise Intelligence’s Andrew Morris and MergeBases’ Oscar van der Meer. Throughout the discussion, Grafi explained topics such as using CDR to defend against macro threats. He also described a recent example of vendor email compromise, shared how Votiro differentiates…
This blog will define the concept of document sanitization and explain why document-based security challenges are especially significant in the current business climate. The blog will then do a deep dive into three industries – healthcare, insurance and the financial sectors – to explore the document-related challenges within each of these industries, and highlight how…
Downloading files from the internet has always been a risky business – and PDF files are no exception. Oftentimes, users don’t think twice before they download a PDF file from the web. And while PDFs seem harmless, they can, unfortunately, carry malicious code that could cause serious damage to an organization. EdgeSpot, an exploit detection…