Trustwave's 2024 Financial Services Threat Reports Highlight Alarming Trends in Insider Threats & Phishing-as-a-Service. Learn More
Get access to immediate incident response assistance.
Get access to immediate incident response assistance.
Trustwave's 2024 Financial Services Threat Reports Highlight Alarming Trends in Insider Threats & Phishing-as-a-Service. Learn More
Trustwave’s MailMarshal received a major update this month with the addition of PageML to the Blended Threat Module. The BTM enables the email security solution to conduct in-depth, real-time scans when a URL in an email is clicked to determine if the URL is malicious. PageML boosts the BTM’s ability to detect malicious URLs by one-third by applying machine learning techniques to page content in real time.
The new scanning feature is named PageML, short for Page Machine Learning. It is a real-time scanning module that inspects HTML content, extracts features, and applies an ML-based classifier to determine if the page is likely phishing or other suspicious content. MailMarshal rolled out PageML to all MailMarshal clients in early March.
PageML is a Trustwave-developed, SpiderLabs-managed URL classifier that is running live in the Trustwave section of VirusTotal and analyzing millions of URLs daily. Testing has shown PageML detects a significant amount of live phishing pages missed by other validators, so it is a welcome addition in the fight against phishing.
Including PageML within MailMarshal, which was done automatically to all MailMarshal clients, will result in end users and admins finding more phishing sites blocked and warnings displayed. Early estimates show at least 30% more phishing URLs will be detected. It’s important to note that no action is necessary by clients, PageML is autonomous.
The PageML validator has two modes of action: block and warn. Higher confidence scores are blocked, and the user cannot click through. PageML classes lower scores as only "suspicious" and will show the end user a warning page.
If a suspicious URL is discovered, the end user will see this message:
Email remains the most likely attack vector a cybercriminal will use so it is imperative that an organization not only have a power email security solution, but builds defense in depth to protect this vulnerable area:
A proper SEG is critical to your email security success. An SEG helps ensure malicious emails and spam don’t make your way into your network by quarantining and flagging problematic emails and email attachments. But every SEG is different--the right one must be flexible enough to work with the policy you set in place and have comprehensive visibility into your incoming email to get ahead of hackers trying to evade detection.
It’s also important for an SEG to be able to unpack or discover items that may be hidden in other files or attachments. For example, an SEG may block emails with certain .exes but may not see that those same files are embedded in an excel document, or zipped in an archive file format such as a .zip or .rar. An SEG also must be able to find and extract potentially malicious files in complicated office document formats, such as a macro within a Word document.
Trustwave MailMarshal offers a sophisticated multi-layered approach to email security to reduce false positives and protect against spam, gateway attacks, viruses, phishing attempts, and malicious URLs embedded in an email. In addition, it provides complete email protection against phishing and business email compromise (BEC).
Trustwave MailMarshal contains a specialized BEC Engine to protect against advanced BEC attacks.
These capabilities are reflected in the fact that MailMarshal:
Trustwave is a globally recognized cybersecurity leader that reduces cyber risk and fortifies organizations against disruptive and damaging cyber threats. Our comprehensive offensive and defensive cybersecurity portfolio detects what others cannot, responds with greater speed and effectiveness, optimizes client investment, and improves security resilience. Learn more about us.
Copyright © 2024 Trustwave Holdings, Inc. All rights reserved.