13 Email Threat Types and How to Defend Against Them

/

During the Barracuda Summit Virtual event last week, I attended a session about email security and how the threat that faces businesses and users through email attacks has advanced over the years and how Barracuda are helping businesses enhance their email security.

The Threat Landscape Evolution

image002.jpg

Some examples of the more complex…..

image004.jpg

This is most complex and has 4 steps -

  • Infiltration get access to an account by Phishing or purchase an account / password for LinkedIn for example

  • Once in they will watch and learn and compromise more accounts

  • Launch attacks internally / externally – distribute malware

  • Then monetize!

Traditional Gateway versus Next Gen API AI solutions.

The evolution of email security – used to just be the gateway

image011.png

Unfortunately for the threats on the right hand side / more complex – gateways are not as effective

Gateway is as important as ever – but a building block for volume

API Analytics for the more complex / hard to detect

For the more complex – where Gateways are not effective ….

Instead of sitting at the entrance / exit – Barracuda Sentinel uses APIs to integrate directly into the mail infrastructure – such as O365.

Much Richer array of information versus traditional gateway solution.

Able to apply machine learning which is not possible with gateway solutions.

image017.png

Your existing Gateway Defence

Q1 – typically yes - traditional gateways are labour intensive, too many rules / policies and will not allow large volume / number of employees.

Q2 – almost all solutions will be able to detect after the event - NOT DURING / WHEN ITS HAPPENING– but this is too late! Rule based policies on gateway make it impossible.

Q3 – Gateway doesn’t scale – too late and labour intensive.  Machine learning will allow scaling over life cycle.

The Barracuda Email Threat Scan –  Free of Charge Tool

Couple of clicks to run this free tool (takes 90 secs to run)

  • Runs through past year of O365 environment

  • Identify Service Impersonations

  • Business Email Compromise

  • Spear Phishing Attacks

  • Top people at risk / fraudulent emails

  • Domains at risk

Barracuda Email Protection have a suite or point products to ensure you have all 13 threats covered….

Run the free email threat scan tool to understand what risk lies within your email. Complete the form below to run request to run the tool.