Anti-Phishing Safeguards Your Enterprise from Phishing Emails
Phishing emails are specifically created to imitate legitimate emails, often
copying actual corporate communication.
Billions of phishing emails are sent out every month and can lead
to identity theft, security breaches, and financial loss and liability.
The average successful fraud nets $1,400, and the latest research
estimates that phishing caused more than $44 billion in damages
worldwide in 2004.
Flush with the success of defrauding consumers, fraudsters
now are turning their sights on businesses. Leveraging social
engineering to evade corporate security systems, fraudsters gain
network access and steal confidential corporate data and financial
assets. With the unwitting cooperation of an employee,
every network defense is useless, including firewalls, IDS/IPS,
and secure identification cards.
Corporate Fraudulent Phishing Email
Phishing is Not Spam
Because phishing emails are designed to look like legitimate business correspondence,
they consistently elude spam filters. Phishing requires specific analysis, identification,
and handling. And email policies alone cannot be used to protect the organization.
What Is the Difference between Spam and Phishing Fraud?
| |
Spam |
But Phishing |
|
| How does it arrive? |
Sneaks in the back door. |
Walks in the front door. |
|
| How does it make its offer? |
Looks bad, seems far-fetched. |
Looks plausible, seems credible. |
|
| What is it trying to do? |
Tries to sell you something. |
Tries to steal something from you. |
|
Stopping Phishing: Unique Solution for a Unique Threat
The only solution that uniquely identifies email phishing,
MailFrontier not only captures phishing, but provides complete
protection through MailFrontier Cognite™, a revolutionary
evidence evaluation system that includes fraudulent email
header, content, and contact point analysis.
The Three Points of MailFrontier Anti-Phishing
- Headers
MailFrontier Anti-Phishing protection includes header
analysis with Sender ID and MailFrontier Reputation™ evaluation,
which uses MailFrontier’s leading reputation database
of over 20 million contact points to validate the quality
of the email message and sender. MailFrontier Anti-Phishing
header review also includes cross-reference with MailFrontier’s
proprietary, real-time black list of known senders of phishing
email. Key to the success of MailFrontier header analysis
is the support of MailFrontier SMART Network™, which
is a real-time network of over one million global users whose
responses enable MailFrontier to determine how to quickly
identify phishing emails.
- Content
Leveraging MailFrontier’s expertise and success with Adversarial Bayesian™ for
anti-spam, MailFrontier Anti-Phishing incorporates Bayesian Fraud™ into
its content analysis. Developed from an extensive database of phishing
and fraud samples collected from the MailFrontier SMART Network and vetted
by MailFrontier Research, Bayesian Fraud content analysis differentiates and
isolates phishing fraud from spam during the filtering process.
- Contact Points
Spearheaded by MailFrontier Research, MailFrontier is
the industry leader in contact point analysis. MailFrontier
Anti-Phishing offers three levels of contact point review:
- Browser exploit detection
MailFrontier analyzes
emails for items such as obfuscated URLs, port-number inconsistencies,
redirections, and encoding that exploit vulnerabilities
in browsers and operating systems.
- Social engineering trick checks
Techniques, such as Divergence Detection™, which
examines the difference between the appearance of a link
and the actual result of acting on that link, are used by
MailFrontier to search for tricks common in phishing fraud
emails, but not in legitimate ones.
- Real-Time Phishing List™
MailFrontier cross-checks
all contact points against its Real-Time Phishing List™,
the industry’s most extensive list of known phishing
links.
MailFrontier also offers anti-phishing options that align
with other corporate security processes:
- Directory Harvest Attack protection can be used to thwart
fraudsters
- Alerts about new types of emerging fraud attacks can be
sent to specified email addresses or to all users, keeping
the company informed of phishing threats and helping to increase
awareness and caution.
- Copies of all fraudulent emails sent to the company can
be forwarded to specified email addresses showing the phishing
threats that have been averted.
Finally, MailFrontier offers distinct phishing reporting, along with alert and
feedback tools, so that administrators can be
kept aware of trends, make necessary security modifications,
and report those findings back to other entities that are part
of your security network.