APT attack: 91% of attacks use email

A fake description of supplementary insurance fee deduction for second-generation Medical Insurance has resulted in the theft of information from tens of thousands of small and medium-sized enterprises. A phishing letter disguised as a bank transaction record, the largest hacker attack ever in South Korea.

APT attacks usually occur in the form of an email. Files Or URLs may be attached to the email to entice the recipient to open the email. Once a user opens a file or link in the email, attackers can obtain all the user's personal information, trade secrets, or priceless intellectual property rights.

Advanced persistent threat (APT) is one of the greatest threats to enterprises today. If enterprises cannot solve the problem of using email attacks, it will have a serious potential impact. Including complaints from customers, suppliers and shareholders, fines, loss of revenue and weakening of brand value.

According to research by Trend Micro trendlabs, 91% of the attacks target the use of email as the starting point. In addition, 78% of targeted emails contain attachments to lure users into clicking.

 

The Trend Micro threat Discovery Device, TDA, can seamlessly integrate with your existing Email infrastructure. Detection methods are tailored based on specific host configurations, custom updates are generated for protection points using deep threat analysis, and customized intelligence is provided to guide you to respond quickly.

The following figure shows the role of the threat detection device TDA in apt attacks:

Advanced threat detection

TDA detects non-intrusive and pure listening for all types of network communication, focuses on identifying malicious content, communication, and behavior that reflects advanced malware or attacker activity at various stages of the attack sequence.

? The dedicated threat engine and multi-level association rules provide the best detection and the lowest false positive rate.

? The virtual analysis program uses custom sandbox simulation to provide other suspicious content detection and comprehensive forensic analysis.

? Cloud Security intelligent protection network intelligence and professional threat researchers can provide continuously updated detection intelligence and association rules to identify attacks

Threat tracking, Analysis and Handling measures

The TDA console provides intuitive real-time threat visibility and in-depth analysis so that security professionals can focus on actual risks, perform forensic analysis, and quickly resolve problems.

Real-time threat Console

Threat visibility and in-depth analysis are at your fingertips.

? Quick access to widgets to provide key information at a glance

? In-depth analysis of attack features, behavior, and communication

? Geotrack can identify sources of malicious communication

Key asset tracking

Provides risk-centric monitoring to monitor threats with High severity and high-value assets.

? Focuses on tracking suspicious activities and events on the specified host

? Identify the host to be tracked through threat detection or customer Selection

? Detailed event timeline tracks all attack activities involving the target host

Cloud computing security encyclopedia

Provides threat intelligence required to understand and remedy attacks.

? Access the Trend Micro intelligence website directly to obtain information about specific attacks or malware.

? Detailed threat features; suppression and remediation suggestions

? Description of available anti-virus/other signature updates for this threat

Security management platform (SOC) Management

Integrates with the leading security management platform to provide improved enterprise-scope Threat Management from the single security management platform console.

? Report network detection, confirmed events and Context data to the Security Management Platform

? In-depth network visibility enhances security management platform Association and multidimensional attack analysis

? Enterprise scope threat management provided by the security management platform as the central console

Flexible and large-capacity deployment

TDA has a high-performance architecture designed to meet the demanding and diverse capacity requirements of customers of all sizes. The product is available on all hardware, software, and virtual devices.

To learn more about the threat detection device of Trend Micro, click TDA.Link:Http://www.trendmicro.com.cn/cn/enterprise/security-management/threat-discovery-appliance/index.html