HTML attachments are more of a security risk than ever - here’s what you need to know
The number of malicious HTML attachments is surging
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
A growing number of emails are arriving loaded with malicious or harmful HTML attachments, new research has warned.
A report from Barracuda found almost half (46%) of HTML attachment in emails it scanned was found to be malicious. Barracuda says the Hypertext Markup Language (HTML) is growing increasingly popular in phishing, credential theft, and other forms of cyberattacks.
“If a recipient opens the HTML file, multiple redirects via JavaScript libraries hosted elsewhere will take them to a phishing site or other malicious content controlled by the attackers. Users are then asked to enter their credentials to access information or download a file that may containmalware,” Barracuda CTO, Fleming Shi, said in ablog post.
Protecting your business from the biggest threats onlinePerimeter 81’s Malware Protection intercepts threats at the delivery stage to prevent known malware, polymorphic attacks, zero-day exploits, and more. Let your people use the web freely without risking data and network security.
Preferred partner (What does this mean?)
Phishing threat
“However, in some cases seen by Barracuda researchers, the HTML file itself includes sophisticated malware which has the complete malicious payload embedded within it, including potent scripts and executables. This attack technique is becoming more widely used than those involving externally hosted JavaScript files.”
The CTO also said that the HTML threats are being distributed via countless individual attacks, rather than a handful of mass events.
“On March 7, there were 672,145 malicious HTML artifacts detected in total, comprising 181,176 different items. This means that around a quarter (27%) of the detected files were unique and the rest were repeat or mass deployments of those files,” Shi said. “However, on March 23, almost nine in ten (85%) of the total 475,938 malicious HTML artifacts were unique – which means that almost every single attack was different.”
Google is killing off passwords in favor of something new - here’s what you need to know>Everything you need to know about phishing>Here’s our list of the best firewalls around
The figures are pointing to HTML attachments remaining one of the most common ways to deliver malware through email, the blog concludes, saying that it’s pivotal for businesses to have the right security solutions set up. “This means having effective, AI-powered email protection in place that can evaluate the content and context of an email beyond scanning links and attachments,” it was said.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Multi-factor authentication, zero-trust access controls, as well as automation in response and attack remediation, is also essential to any organization’s cybersecurity tech stack, right next to employee training, Shi concluded.
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
A new form of macOS malware is being used by devious North Korean hackers
Scammers are using fake copyright infringement claims to hack businesses
We might have our first look at the long-rumored Samsung tri-fold
