Welcome!

News Feed Item

Barracuda Security Insight Platform Reveals Highly Weaponized File Types

New Advisory Platform Provides Advanced Threat Trends in Real-Time

CAMPBELL, Calif., Feb. 15, 2018 /PRNewswire/ -- Barracuda Networks, Inc., a leading provider of cloud-enabled security and data protection solutions, today announced the availability of Barracuda Security Insight. The new advisory platform offers detailed real-time threat intelligence and security risk information to help consumers and IT professionals remain aware of current global threat levels.

Barracuda Logo. (PRNewsFoto/Barracuda Networks, Inc.)

By analyzing data collected from Barracuda endpoints all over the globe, Barracuda Security Insight helps determine the current cybersecurity threat level based on email, network, and web traffic flows. It provides summaries and detailed views of current threat campaigns that Barracuda tracks in real-time.

Some of the recent threat trends revealed by Barracuda Security Insight include:

  • PDF files represent the highest volume of weaponized file types to be transmitted through observed attack surfaces due to their ability to be simply constructed and easily transmitted. PDFs scanned in the last three months showed nearly 41 million were part of an attack. PDFs often contain links to bad sites and active scripts.
  • The most sophisticated attacks with the highest efficacy are carried over embedded scripts such as JavaScript (JS) and VisualBasic (VB). Recent findings revealed that over 75 percent of these scripts are malicious. Scripts can be embedded in html, or other rich document formats such as rtf and Office. A sample of 70 million Office documents scanned in the last three months found more than 4.7 million to be malicious or suspicious.
  • Compressed files are an increasingly popular way for criminals to transmit disguised attacks and hide non-malware infections such as PowerShell (PS) scripts. An example of this took place in September of 2017 when Barracuda detected and blocked a massive ransomware campaign with over 27 million emails reaching customers in less than 24 hours. 

These threat trends gathered by Barracuda Security Insight are expected to continue with extensive use of weaponized file types to carry out massive attacks. In addition, the Equifax breach and other cybersecurity events have resulted in the significant loss of personally identifiable information (PII) for millions of consumers. Barracuda expects to see an increased use of this information for both mass phishing and targeted spear phishing attacks.

"Organizations often become aware of vicious cyberattacks after the damage has already been done," said Fleming Shi, SVP of Technology at Barracuda. "By offering a free global advisory platform like Barracuda Security Insight, we can help heighten security awareness by proactively identifying the most current threats that should be on everyone's radar. Those who use the platform can ultimately gain a better understanding of the threat landscape in real-time — an awareness that can lead to an overall improved security posture."

How Barracuda Security Insight Works
Barracuda analyzes large volumes of global threat intelligence from several sources and presents this through Barracuda Security Insight in the form of easy to read threat trends, detailed information on attack campaigns and an aggregated threat score.

Barracuda Security Insight includes real-time activity seen from the following traffic:

  • Email: Includes email-borne attacks containing malicious links and attachments, malware, ransomware, and botnets.
  • Network Perimeter: Includes zero-hour vulnerability exploits, brute force attacks, DDoS, spyware, and spam.
  • Web Access: Includes web browsing attacks involving ransomware, malware, and vulnerability exploits in the wild.
  • Endpoints: Includes malware, persistent spyware, botnets, ad and click fraud, IoT malware, and compromised dead apps.

Barracuda Security Insight is currently offered at no cost. It is available via the Barracuda website and also provides an open API integration into applications from common web portals and dashboards, and digital assistants such as Alexa. To access Barracuda Security Insight today, please visit https://csi.barracuda.com.

About Barracuda Networks, Inc.
Barracuda simplifies IT with cloud-enabled solutions that empower customers to protect their networks, applications and data, regardless of where they reside. These powerful, easy-to-use and affordable solutions are trusted by more than 150,000 organizations worldwide and are delivered in appliance, virtual appliance, and cloud and hybrid deployment configurations. Barracuda's customer-centric business model focuses on delivering high-value, subscription-based IT solutions that provide end-to-end network and data protection. For additional information, please visit barracuda.com.

Barracuda Networks, Barracuda, and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the US and other countries.  

Forward-Looking Statements
This press release contains forward-looking statements, including statements regarding the potential benefits, performance, and functionality of Barracuda Security Insight. You should not place undue reliance on these forward-looking statements because they involve known and unknown risks, uncertainties and other factors that are, in some cases, beyond the Company's control and that could cause the Company's results to differ materially from those expressed or implied by such forward-looking statements. Factors that could materially affect the Company's business and financial results include, but are not limited to customer response to the Company's products, as well as those factors set forth in the Company's filings with the Securities and Exchange Commission. The Company expressly disclaims any intent or obligation to update the forward-looking information to reflect events that occur or circumstances that exist after the date of this press release.

Contact
Jesse Kimbrel                                                
Barracuda Networks, Inc.                  
408-342-5683
[email protected]  

 

Cision View original content with multimedia:http://www.prnewswire.com/news-releases/barracuda-security-insight-platform-reveals-highly-weaponized-file-types-300599252.html

SOURCE Barracuda Networks, Inc.

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
Headquartered in Plainsboro, NJ, Synametrics Technologies has provided IT professionals and computer systems developers since 1997. Based on the success of their initial product offerings (WinSQL and DeltaCopy), the company continues to create and hone innovative products that help its customers get more from their computer applications, databases and infrastructure. To date, over one million users around the world have chosen Synametrics solutions to help power their accelerated business or per...
All in Mobile is a place where we continually maximize their impact by fostering understanding, empathy, insights, creativity and joy. They believe that a truly useful and desirable mobile app doesn't need the brightest idea or the most advanced technology. A great product begins with understanding people. It's easy to think that customers will love your app, but can you justify it? They make sure your final app is something that users truly want and need. The only way to do this is by ...
Authorization of web applications developed in the cloud is a fundamental problem for security, yet companies often build solutions from scratch, which is error prone and impedes time to market. This talk shows developers how they can (instead) build on-top of community-owned projects and frameworks for better security.Whether you build software for enterprises, mobile, or internal microservices, security is important. Standards like SAML, OIDC, and SPIFFE help you solve identity and authenticat...
The digital transformation is real! To adapt, IT professionals need to transform their own skillset to become more multi-dimensional by gaining both depth and breadth of a wide variety of knowledge and competencies. Historically, while IT has been built on a foundation of specialty (or "I" shaped) silos, the DevOps principle of "shifting left" is opening up opportunities for developers, operational staff, security and others to grow their skills portfolio, advance their careers and become "T"-sh...
Digital Transformation and Disruption, Amazon Style - What You Can Learn. Chris Kocher is a co-founder of Grey Heron, a management and strategic marketing consulting firm. He has 25+ years in both strategic and hands-on operating experience helping executives and investors build revenues and shareholder value. He has consulted with over 130 companies on innovating with new business models, product strategies and monetization. Chris has held management positions at HP and Symantec in addition to ...
Whenever a new technology hits the high points of hype, everyone starts talking about it like it will solve all their business problems. Blockchain is one of those technologies. According to Gartner's latest report on the hype cycle of emerging technologies, blockchain has just passed the peak of their hype cycle curve. If you read the news articles about it, one would think it has taken over the technology world. No disruptive technology is without its challenges and potential impediments t...
Hackers took three days to identify and exploit a known vulnerability in Equifax’s web applications. I will share new data that reveals why three days (at most) is the new normal for DevSecOps teams to move new business /security requirements from design into production. This session aims to enlighten DevOps teams, security and development professionals by sharing results from the 4th annual State of the Software Supply Chain Report -- a blend of public and proprietary data with expert researc...
Lori MacVittie is a subject matter expert on emerging technology responsible for outbound evangelism across F5's entire product suite. MacVittie has extensive development and technical architecture experience in both high-tech and enterprise organizations, in addition to network and systems administration expertise. Prior to joining F5, MacVittie was an award-winning technology editor at Network Computing Magazine where she evaluated and tested application-focused technologies including app secu...
Dynatrace is an application performance management software company with products for the information technology departments and digital business owners of medium and large businesses. Building the Future of Monitoring with Artificial Intelligence. Today we can collect lots and lots of performance data. We build beautiful dashboards and even have fancy query languages to access and transform the data. Still performance data is a secret language only a couple of people understand. The more busine...
Having been in the web hosting industry since 2002, dhosting has gained a great deal of experience while working on a wide range of projects. This experience has enabled the company to develop our amazing new product, which they are now excited to present! Among dHosting's greatest achievements, they can include the development of their own hosting panel, the building of their fully redundant server system, and the creation of dhHosting's unique product, Dynamic Edge.
This session will provide an introduction to Cloud driven quality and transformation and highlight the key features that comprise it. A perspective on the cloud transformation lifecycle, transformation levers, and transformation framework will be shared. At Cognizant, we have developed a transformation strategy to enable the migration of business critical workloads to cloud environments. The strategy encompasses a set of transformation levers across the cloud transformation lifecycle to enhance ...
Your job is mostly boring. Many of the IT operations tasks you perform on a day-to-day basis are repetitive and dull. Utilizing automation can improve your work life, automating away the drudgery and embracing the passion for technology that got you started in the first place. In this presentation, I'll talk about what automation is, and how to approach implementing it in the context of IT Operations. Ned will discuss keys to success in the long term and include practical real-world examples. Ge...
The challenges of aggregating data from consumer-oriented devices, such as wearable technologies and smart thermostats, are fairly well-understood. However, there are a new set of challenges for IoT devices that generate megabytes or gigabytes of data per second. Certainly, the infrastructure will have to change, as those volumes of data will likely overwhelm the available bandwidth for aggregating the data into a central repository. Ochandarena discusses a whole new way to think about your next...
So the dumpster is on fire. Again. The site's down. Your boss's face is an ever-deepening purple. And you begin debating whether you should join the #incident channel or call an ambulance to deal with his impending stroke. Yes, we know this is a developer's fault. There's plenty of time for blame later. Postmortems have a macabre name because they were once intended to be Viking-like funerals for someone's job. But we're civilized now. Sort of. So we call them post-incident reviews. Fires are ne...
CloudEXPO New York 2018, colocated with DevOpsSUMMIT and DXWorldEXPO New York 2018 will be held November 12-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI and Machine Learning to one location.