In a remarkable demonstration of cyber security capabilities, Darktrace Antigena Email has successfully detected and neutralized a so-called Fearware attack. This type of attack uses fear and urgency to get users to open harmful links and has managed to bypass most traditional security measures.

Important findings

  • Darktrace Antigena Email detects and neutralizes fearware attacks that bypass traditional gateways.
  • Cybercriminals use emotional manipulation to tempt users into harmful actions.
  • Most existing security solutions fail to detect personalized attacks.

What is Fearware?

Fearware is a new trend in cybercrime where attackers exploit people’s collective fear to manipulate them. In recent months, attackers have sent emails allegedly from the Centers for Disease Control and Prevention (CDC) containing urgent information about COVID-19. These emails are designed to make the recipient click on harmful links.

The weaknesses of traditional security solutions

Most organizations use Secure Email Gateways (SEGs), which act as filters between the sender and the recipient. However, these systems are often unable to detect novel or personalized attacks. They rely on lists of known threats that are quickly outdated as cybercriminals are constantly developing new tactics.

  • Examples of weaknesses: SEGs often detect only obvious threats. They cannot identify new or unknown IP addresses or domains. Sandboxing techniques are often ineffective because they do not detect attacks in time.

Darktrace Antigena Email: A New Approach

Darktrace has developed an innovative approach to email security with Antigena Email. Instead of scanning emails only once, Antigena Email analyzes them continuously and in real time. This enables deeper insight into behavior within the organization and helps identify threats more effectively.

  • How does it work? Antigena Email analyses email metadata. It compares this data with normal behaviour within the organisation. If anomalies are detected, the email is immediately classified as suspicious and neutralised.

Conclusion

Cybercrime is constantly evolving, and traditional security solutions often can’t keep up. Darktrace Antigena Email provides a proactive approach to detecting and neutralizing threats by analyzing and continuously adapting behavior within the organization. In the ever-changing landscape of cyber threats, this approach is critical to ensuring the security of businesses.

Sources

  • How Darktrace Antigena Email Caught A Fearware Email Attack | Darktrace Blog, Darktrace.