Name: What Threat Actors Don’t Want You to Know: Active Evasion Techniques
Start: 2021-07-20T20:11:00Z
End: 2021-07-20T20:11:27.000Z
Location: BrightTALK
Rating: 4

Fortra’s Digital Risk and Email Protection provide comprehensive solutions for your toughest email security and brand integrity challenges. Through our digital risk protection solutions, we provide curated threat intelligence and complete mitigation of external threats across web, social, and mobile channels, while our email security and anti-phishing solutions protect emails, brands, and data from sophisticated phishing attacks, insider threats, and data loss.  

The 2023 Cyberthreat Defense Report provides deep insight into the perspectives of cybersecurity professionals.

Join us to learn what your peers are thinking and doing Thursday, May 4, at 11 a.m. ET. Eric George, Director of Solutions Engineering at Fortra, and Steve Piper, CEO of CyberEdge, will present an analysis of which threats IT security teams are concerned about most, what technologies they currently have in place, and how they are planning to invest future IT security budgets. 

Key takeaways include:
•  The cyberthreats IT security teams find most concerning include account takeover (ATO) attacks, phishing, and brand impersonation on social media.
•  Security professionals believe their organizations’ capabilities to detect advanced threats and protect their brands are less adequate than last year.
•  Over 40% of organizations are prioritizing technologies that incorporate machine learning and/or artificial intelligence to detect sophisticated threats.
•  Top web and mobile concerns include ATO attacks, carding, payment fraud, and ad fraud.

Register now to benchmark your company’s security posture, product investments, and best practices against peers in your industry and region.

Fortra is a proud sponsor of the 2023 Cyberthreat Defense Report from CyberEdge. Now in its tenth year, this data-driven report gauges perceptions of 1,200 IT security professionals representing 17 countries and 19 industries. The report provides benchmarks your company can use to better understand how perceptions, priorities, and security postures stack up against industry peers.

Key Insights from the 2023 Cyberthreat Defense Report

How frequently are advanced threats actually bypassing your email security controls?

One of the greatest challenges to protecting end users from high impact email attacks is detecting identity deception. Fortra has conducted an analysis of real end user phishing reports to determine which advanced threat types evade common secure email gateways and the frequency which they occur to better understand how enterprises can stop these attacks.

John Wilson, Senior Fellow, Threat Research, walks us through the results of the analysis and what security teams can do to prevent attacks left unchecked by their SEG. You will learn:

The volume of malicious messages making it into inboxes on a per user basis
Which threat types were least likely to be blocked by security tools
The performance of the most common SEG vendors
What businesses can do to address the gaps in their email security

What's Making It Past Secure Email Gateways?

Cybercriminals register hundreds of thousands of look-alike domains every year to carry out a wide variety of attacks. Impersonating trusted healthcare organizations, they send deceptive emails that convince recipients to transfer money, hand over sensitive medical data, and click on links that deliver malware.

In this webinar, we'll show how look-alike domains serve as the foundation for multiple types of cyberthreats and best practices for preventing BEC, ransomware, and phishing attacks.

You’ll learn:
- How multiple threats are created, often with the same domain
- What to look for when collecting domain intelligence
- Actionable strategies for getting malicious domains taken offline

Healthcare Cyberthreats: How to Combat BEC, Ransomware, and Phishing Attacks

Cybercriminals constantly evolve their tactics to evade detection. This is especially true for phishing campaigns. Threat actors frequently use new techniques to make phishing sites more difficult to detect, leading to more stolen credentials and greater fraud losses.

In this 30-minute session, PhishLabs will detail the top techniques cybercriminals use to keep phishing sites under the radar and how to counteract them.

You’ll learn:
• The top techniques used by cybercriminals
• How these techniques evade intelligence and detection technologies
• Countermeasures to defeat evasion techniques

What Threat Actors Don’t Want You to Know: Active Evasion Techniques

As-a-Service models continue to change the ransomware landscape. Prominent threat groups operate as enterprises and blend outsourced cybercrime services with sophisticated in-house expertise, while less advanced actors take advantage of a wide range of commodity malware tools and services. This quickly evolving and chaotic environment can make it difficult for security teams to stay ahead of ransomware threats and minimize risk to the business.

Join us for an informative discussion as ransomware experts from Digital Defense, PhishLabs, and Avertium discuss the evolving face of ransomware, current attack methods, and measures to maintain the integrity of your data. Learn how security teams can proactively protect against ransomware threats and mobilize quickly in the face of an attack with the latest Threat Intelligence, Vulnerability Management, and Incident Response strategies.

Attend the webinar to learn:
• What is happening across the ransomware landscape now
• Steps you can take now to reduce ransomware risk
• Strategies to implement before, during, and after a ransomware attack
• How Digital Defense, PhishLabs, and Avertium can help security teams stay ahead of ransomware

Outsmarting RaaS: Strategies to Reduce the Risk of a Ransomware Attack

As retail brands expand their online presence to selling goods and engaging with consumers, threat actors are leveraging the credibility of reputable organizations to profit off of cannibalized sales. 

Counterfeit storefronts mimic legitimate brands using look-alike domains, copyrighted content, and stolen intellectual property. Threat actors also integrate trusted payment applications to increase their odds of deceiving would-be buyers. 

In this webinar, PhishLabs experts will break down the online counterfeit landscape with real-world intelligence and examples of attacks targeting retailers. Additionally, presenters will provide a framework security teams can implement to disrupt unauthorized storefronts and protect your brand.

Emerging Threats: Disrupt Counterfeit Activity Targeting Retail Brands

More than a million corporate users worldwide take part in the Gone Phishing Tournament, hosted by Terranova Security and Microsoft. In this PhishLabs webinar, we’ve invited Theo Zafirakos, CISO of fellow HelpSystems solution Terranova, to share the latest trends and benchmarking data from the global tournament. 

Attend the webinar to learn:
- Average click rate by company size and industry
- Common practices of the best performing companies
- Click and malicious file download benchmarking rates

The webinar will take place on September 27 at 11a.m. Eastern Time.

Benchmarking from the World's Largest Phishing Exercise

Digital Risk Protection is an emerging technology that is on the rise in Gartner’s latest Hype Cycle for Security Operations. In this webinar, PhishLabs’ Founder and CTO, John LaCour, will break down Digital Risk Protection, explain how it works, and share recent use cases. You will learn how the Healthcare industry is using Digital Risk Protection to proactively detect and mitigate brand abuse, data leaks and social media threats across digital channels.

Digital Risk Protection: Evolving Your Cyber Threat Intel Program Into Action

Throughout Q2, Agari and PhishLabs detected and mitigated hundreds of thousands of phishing, social media, email, and dark web threats targeting a broad range of enterprises and brands. The Quarterly Threat Trends & Intelligence Report provides an analysis of the latest findings and insights into key trends shaping the threat landscape.

Join our Quarterly Threat Trends & Intelligence webinar Tuesday, August 16, at 2 p.m. Eastern, where John Wilson, Senior Fellow for Threat Research at Agari by HelpSystems, will discuss the report findings and what recent changes to the threat landscape mean for your business. Attendees will learn: 

•  How phishing attack volume changed from Q1 to Q2 
•  Which industries are targeted the most  
•  The top social media and dark web threats 
•  Which TLDs and free technical services are abused most often 
•  The leading email threats targeting user inboxes

Quarterly Threat Trends & Intelligence Webinar (August 2022)

Throughout Q1, Agari and PhishLabs detected and mitigated hundreds of thousands of phishing, social media, email, and dark web threats targeting a broad range of enterprises and brands. The Quarterly Threat Trends & Intelligence Report provides an analysis of the latest findings and insights into key trends shaping the threat landscape.

Join our Quarterly Threat Trends & Intelligence webinar Tuesday, May 24, at 2 p.m. Eastern, where John LaCour, Principal Strategist at HelpSystems, will discuss the report findings and what the recent changes to the threat landscape mean for enterprises. Attendees will learn:

•  How phishing attack volume changed in Q1 from 2021
•  Which industries are targeted the most 
•  The top social media and dark web threats
•  Which TLDs and free technical services are abused most often
•  The leading email threats targeting user inboxes

Quarterly Threat Trends & Intelligence Webinar (May 2022)

In this informative webinar, CyberEdge CEO Steve Piper will share findings from CyberEdge’s 2022 Cyberthreat Defense Report (CDR). 

Now in its ninth year, the CDR has become the standard for assessing organizations’ security posture, gauging perceptions of IT security professionals, and for ascertaining current and planned investments in IT security infrastructure. 

The 2022 CDR assesses the views of 1,200 IT security professionals representing 17 countries and 19 industries. It’s the most geographically comprehensive view of IT security perceptions in our industry, and PhishLabs is proud to be a sponsor. 

Key insights from this year’s report include:   
• 85% of organizations suffered from a cyberattack last year  
• A record 71% of organizations were compromised by ransomware last year, and a record • 63% of ransomware victims paid ransoms last year, encouraging cybercriminals to increase their attacks 
• Malware, account takeover attacks, and ransomware are the most-feared threats 

Register now and use the 2022 CDR findings to benchmark your company’s security posture, operating budget, product investments, and best practices against peers in your industry and region.

Insights From CyberEdge’s 2022 Cyberthreat Defense Report

Throughout 2021, PhishLabs detected and mitigated hundreds of thousands of phishing, social media, email, and dark web threats targeting a broad range of enterprises and brands. The PhishLabs Quarterly Threat Trends & Intelligence Report provides an analysis of the latest findings and insights into key trends shaping the threat landscape.

Join our Quarterly Threat Trends & Intelligence webinar Tuesday, February 15, at 2 p.m., where John LaCour, Principal Strategist at HelpSystems, will discuss the report findings and what recent changes to the threat landscape mean for your business. Attendees will learn:

•  How phishing attack volume changed throughout 2021
•  Which industries are targeted the most
•  The top social media and dark web threats
•  Which TLDs and free technical services are abused most often
•  The leading email threats targeting user inboxes

Quarterly Threat Trends & Intelligence Webinar (FEB 2022)

Throughout 2021, PhishLabs has detected and mitigated hundreds of thousands of phishing, social media, email, and dark web threats targeting a broad range of enterprises and brands. The PhishLabs Quarterly Threat Trends & Intelligence Report provides an analysis of the latest findings and insights into key trends shaping the threat landscape. 

Join our Quarterly Threat Trends & Intelligence webinar Tuesday, November 9, at 2 p.m., where John LaCour, Founder and CTO of PhishLabs, will discuss the report findings and what recent changes to the threat landscape mean for your business. Attendees will learn: 

•  How phishing attack volume has changed since January
•  Which industries are targeted the most
•  The top social media and dark web threats
•  Which TLDs and free technical services are abused most often
•  The leading email threats targeting user inboxes

Quarterly Threat Trends & Intelligence Webinar (NOV 2021)

In the first half of 2021, PhishLabs detected and mitigated hundreds of thousands of external phishing, social media, and email threats targeting a broad range of enterprises and brands. In this webinar, John LaCour, Founder and CTO of PhishLabs, will analyze the Q2 findings and provide insight into key trends shaping the threat landscape. 

Attendees will learn: 
• How phishing attack volume has changed in Q2
• Which industries were targeted the most
• The top Social Media threats used to attack enterprises
• Which TLDs and free technical services are abused most often
• The leading email threats bypassing filters and reaching user inboxes

Quarterly Threat Trends & Intelligence Webinar (Aug 2021)

Digital Risk Protection

Phishing

Cyber Attacks

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

What Threat Actors Don’t Want You to Know: Active Evasion Techniques

Presented by

About this talk

Fortra's PhishLabs