Top

Attack Campaign Experiments with Rapid Changes in Email Lure Content

February 22, 2019

It’s like polymorphic behavior – only the changes are in the email lures themselves, with randomized changes to headers, subject lines, and body content.

A new email Trojan campaign spotted by security researchers has added another twist in evasive attacker behavior: Researchers with GreatHorn report that the waves of attacks they’ve observed since yesterday afternoon are rapidly randomizing the email content characteristics of their lures.

“Masquerading as a confirmation on a paid invoice, the attack is sophisticated in that it lacks the consistency of a typical volumetric attack, making it more challenging for email security tools to identify and block,” says E.J. Whaley, solutions engineer at GreatHorn.

Read More on Dark Reading