Weekly Threat Report May 27

In this edition, we uncover phishing emails disguised as urgent documents, malicious ads redirecting users to harmful sites, and browser hijacker extensions altering your settings. Discover how ConcealBrowse's isolation feature protects you by blocking these threats and ensuring your browsing experience remains safe and secure.

This page was detected by ConcealBrowse on May 22nd, the same day other security vendors began reporting. It was initially reported by two security vendors and is currently detected by 10 vendors for phishing and malicious activity. ConcealBrowse intervened with an 11% risk assessment, citing suspicious behavior.

This is a shared document scam that aims to steal email credentials. The link is usually delivered via a phishing email that informs the user that there is a document available to view. The document will be something with high-priority, such as a bill or an invoice, to convince the user to click on the link right away. The compromised email account can then be used to send the same malicious link to other users, continuing the phishing attack. While in an isolated session, keyboard input is ignored, and users cannot enter sensitive information into suspicious sites.

This site was first detected by ConcealBrowse on May 24th and was originally seen by one security vendor in April. It is currently detected by four vendors for malicious behavior. ConcealBrowse intervened with a 15% risk assessment due to suspicious activity.

This domain has been infected by malicious advertisements. Malicious advertising campaigns can distribute spam or infect the user’s browser with pop-up notifications, such as in the image above. They may also redirect the user to other harmful or illegitimate websites, including technical support scams and fake antivirus notifications. ConcealBrowse’s isolation protects users from malicious pages, such as browser notification scams, by keeping the site in the sandbox environment.

This page was detected by ConcealBrowse on May 20th, the same day other security vendors began reporting. It is currently detected by 3 vendors for malicious behavior. ConcealBrowse intervened with a 12% risk assessment, citing suspicious activity.

The browser extension hosted on this webpage has been reported by other security vendors for being a browser hijacker. The extension will manipulate browser settings, such as the default search engine, to redirect the customer towards unwanted sites. These sites may not follow proper privacy policies, leaving the user at risk for their data being stolen and sold to other advertising platforms. ConcealBrowse will not let the user install an extension from a suspicious site in isolation.

Valuable Outcomes

As this recent threat reports exemplify, ConcealBrowse offers comprehensive protection against many sophisticated cyber threats. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to confidently navigate the digital landscape, knowing their online activities are shielded from potential harm.

Sign Up for Free Licenses of ConcealBrowse

Join the Conceal Community today and fortify your online security for free! Discover how ConcealBrowse provides essential browser-based threat protection, intercepting threats others miss and offering early intervention for advanced security. Protect your network from 100% of email and browser threats with ConcealBrowse. Our AI-driven solution protects your organization from malware, ransomware, zero-day attacks, credential theft, and other online risks.

Get started today at https://conceal.io/free/

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.