Radius Blended Threats Module


 

Radius Blended Threats Module

 

Radius Blended Threats Module

 

Wipe out targeted attacks

 

Overview

 

Criminals who organize targeted attacks based on blended threats emails use social engineering techniques to craft email messages that appear to be from a trusted sender but actually contain a link to a website hosting malicious code. They will then use a variety of tools for greater access to information and systems. Blended Threats Module provides a powerful solution to targeted attacks and blended threats. Using real-time behavioural analysis and content inspection, the Blended Threats Module blocks any site serving suspicious or malicious code. Because the service doesn’t rely on signatures, it is never out of date when it comes to catching and neutralizing new exploits.

 

The Blended Threats Module provides uncompromising security with no management overheads. Running as a cloud-based service means that protection is extended to any recipient who is forwarded a link that has been rewritten by Radius Blockmail. The Blended Threats Module analyses millions of URLs daily, providing protection against targeted attacks and blended threats and feeding into Radius Lab’s research. Rather than relying on reputation or signature-based protection, it separates a webpage into its individual components (HTML, Java, Flash, ActiveX, etc.) putting each through their own dedicated analytical engines. Any obfuscated or hidden information is decoded and also subjected to rigorous analysis. Then additional deep code analysis determines a behavioural profile that reveals any potential malicious combination of the separate functions. This identifies and mitigates both unknown and dynamic threats. When a website is determined to be hosting malicious code, the Blended Threats Module will inform the user that access has been denied. As the URL has already been rewritten by Radius Blockmail, this protection will be afforded to anybody who is subsequently forwarded the message, including users trying to access the compromised website via a mobile device or over webmail.

 

How does it work?

 

1. Radius Blockmail receives the email for scanning and decides that a URL in the message body needs to be analysed. It rewrites the URL, prepending it with a unique customer reference and a link to the Blended Threats Module.

2. When a user clicks on the link, the request is directed through the Blended Threats Module for analysis.

3. The Blended Threats Module analyses Web content associated with the link, subjecting it to numerous checks for behaviour and intent.

4. If the webpage is free from malicious code, it is served to the user. If not, then the user receives a block page indicating that he or she has been protected from a targeted attack.

 

Features/Benefits

Multi-layered anti-malware engine featuring Radius Blockmail dynamic and real-time code analysis

 

Both targeted and opportunistic attacks use advanced techniques to evade detection, exploit vulnerabilities and compromise computers. Real-time code analysis identifies the behaviour and intent of code being served by a webpage. It does not rely on signatures to ensure protection against both known and previously unseen attacks, which account for 60% of the modern malware missed by anti-virus, firewall, IPS/IDS and reputation-based solutions. Preventing machines from being compromised in the first place removes the costs associated with being the victim of any successful malware attack, such as desktop re-imaging, loss of data, damage to reputation or even fines.

 

Rewrites URLs

 

With a rewritten URL, the link is scanned by the Blended Threats Module whenever a user clicks on the link, even if that email has been subsequently forwarded. This ensures that the target website is scanned at the time of access so there is no window of opportunity for an attack to take place.

 

Scans websites on access

 

During a staged targeted attack, the malicious code on a webpage may only become active after a certain period of time or for short spells during a day. This ability to hide, combined with the way active malicious code may change, means that it is essential to scan a website each and every time it is accessed from an untrusted link and the dynamic nature of the webpages.

 

Reports back to Radius Blockmail

 

The Blended Threats Module feeds information back into Radius Blockmail on a frequent basis to provide essential data for reporting and analysis. This data allows administrators to identify users who may be a particular target or those who may need additional security awareness training. It can also be used to demonstrate a return on investment from the service based on the number of attacks it has prevented.

 

Block page informs users of a threat

 

Notifying users of a potential threat not only stops them from visiting a website hosting malicious code, but it also acts as a reminder about safe computing habits, encouraging them to adopt a more cautious approach when browsing the Internet.


Related News


Latest Office 365 Phishing Scam

Cyber scammers are always on the leading edge of innovation. Their latest campaign involves sending emails to users asking them to complete the mandatory TFA set up in Office 365. The user is then brought to a fake Microsoft webpage where the user is asked to enter personal information like a password, mobile number, and a secondary email address (usually a personal email address). 

View All

Call our sales team now on LoCall 1890 592500.

Alternatively, please send us a message via the form below and we’ll call you back.

Get in Touch





Certified Excellence


Radius maintain both ISO quality and Information Security certification. With GDPR regulations now in force, it’s critical that your IT partner handles your organisation’s sensitive data with the highest of standards.

ISO Quality and Information Security certification requires rigorous processes to be embedded at the heart of everything we do. Radius is proud to maintain this standard, awarded to only the very top tier of IT service providers.

Industry leading partnerships

Radius is a gold Microsoft partner for Datacenter and Cloud Solutions, a preferred HP and Cisco partner and a Retail Excellence Ireland gold partner. These partnerships give us unrivalled access to the best technology to support our clients’ IT and Telecoms needs.