Browser-Based Threat Report: Jan 22

/in /by

Browser-Based Threat Report

Week of January 22nd, 2024

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs and other browser-based threats. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly browser-based threat report for the week of January 22nd, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following browser-based threat report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 4ea2f82641a8b923d53a61edc51e8768561d25556946946c1a467aba9183f29a

Browser-Based Threat

Browser-Based Threat

ConcealBrowse detected this URL on January 16th, 2024. It was first identified by 2 security vendors six months ago and is currently reported by 11 others. ConcealBrowse isolated the page with a 37% risk due to possible malware and phishing.

Initially, this web page appears to be a generic banking website requesting information for a new account. However, further investigation into the website reveals an address in Los Angeles that does not exist, and there is no phone number listed. The company name has a history of being used for banking scam operations, and this page is an example of personal information harvesting. These kinds of attacks can be used for identity theft and are particularly dangerous because they are often brushed off as legitimate due to the nature of the web page.

_____________

SHA-256: 0b9e8fdb4a6570b8168bedccf11b14e33d91648f896c5b24b66e92c7ee5fb4e5

ConcealBrowse detected this URL on January 18th, 2024. Later that day, other security vendors started reporting it as well. It has now been identified by 9 vendors, labeling it as malware and malicious. ConcealBrowse assigned this threat a 14% risk.

Software that has not been shared from recognized publishers, such as the one on this site, should be avoided whenever possible. They may contain hidden malware that deploys on the machine when installed. When analyzed, the program hosted on this website contained possible credential scraping tools. These tools scan browsers for any saved passwords to steal and compromise accounts. Although the website itself is not malicious, ConcealBrowse’s isolation allows users to recognize that the downloadable programs on this site could be dangerous.

Browser-Based Threat

Browser-Based Threat

_____________

SHA-256: 3a03d73e9bb846554236a08c4fe09af885930c0583060de6ec3a62b9a2eca6e2

Browser-Based Threat: Netflix

Browser-Based Threat: Netflix

This URL was detected by ConcealBrowse on January 19th, 2024. It was detected by several security vendors in February of 2023 and is currently being flagged by 12 of them. It is classified as a phishing attempt, being isolated by ConcealBrowse with a 14% risk assessment.

This webpage is a clone of the Netflix home page and includes a box for the user to enter their email address, as well as various images and hyperlinks. Even though a password is not harvested, collecting email addresses can lead to more specialized attacks, such as spear phishing. Creating a Netflix clone is a common practice exercise for new web developers, but they usually have multiple pages and elements such as thumbnails and embedded video trailers. This page lacks these features, and that, combined with other suspicious elements found by ConcealBrowse, indicates that this is likely a malicious page.

_____________

Valuable Outcomes

As this recent threat reports exemplify, ConcealBrowse offers comprehensive protection against many sophisticated cyber threats. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to confidently navigate the digital landscape, knowing that their online activities are shielded from potential harm.

Join the Conceal Community and claim your FREE ConcealBrowse licenses!

Join the Conceal Community today and fortify your online security for free! Don’t miss the chance to benefit from our advanced threat protection and stay one step ahead of cybercriminals. Experience peace of mind while browsing the internet, knowing that ConcealBrowse is your shield against the ever-evolving threat landscape. Take the proactive step towards a safer online experience – get your free ConcealBrowse license now and join a community committed to safeguarding your digital world.

Sign up for the Conceal Community and claim your free licenses by completing the form below.


press release hero

Conceal to Partner with Nordic Solutions to Expand into Southeast Asia

/in /by

Conceal to partner with Nordic Solutions to integrate its sophisticated ConcealBrowse technology, enhancing Nordic Solution’s proactive and responsive offerings for its Asia-Pacific client base

January 19 2024, 10:23 AM Eastern Daylight Time

AUGUSTA, GA –(BUSINESS WIRE)–Conceal, renowned for its innovative approach to browser security, proudly announces a strategic distribution partnership with Nordic Solutions Asia Pte Ltd, headquartered in Singapore with offices across the region in Indonesia, Malaysia, Philippines, Thailand, and Vietnam, a prominent value-added distributor of network cybersecurity products dedicated to shaping the future of technology solutions in the Asia-Pacific region. With this alliance, Nordic Solutions’ dedicated clientele will now be empowered with the enhanced browser protection of ConcealBrowse.

“The Asia-Pacific region represents some of the largest and most sophisticated cyber customers in the world, and we’re thrilled to bring ConcealBrowse’s unmatched capabilities to Nordic Solutions’ exclusive portfolio. Nordic Solutions’ expertise, experience, and respect in the region makes them an ideal partner for Conceal,” said Gordon Lawson, CEO of Conceal. “By incorporating ConcealBrowse into Nordic Solutions’ suite of offerings, we believe our partnership will revolutionize how organizations in Southeast Asia detect, react, and defend against the multi-faceted threats of today and tomorrow.”

“We are unwavering in our pursuit of excellence within our comprehensive IT services. The collaboration with Conceal represents a significant milestone in our ongoing commitment to providing cutting-edge cybersecurity solutions. This partnership brings together Nordic Solutions’ extensive expertise and regional influence with Conceal’s forward-thinking approach to browser security. By seamlessly integrating Conceal’s innovative technology into our exclusive portfolio, we are positioned to revolutionize the cybersecurity landscape in the Asia-Pacific region. Together, we aim to empower organizations to proactively address evolving cyber threats, reinforcing our shared dedication to fostering a secure digital future for businesses throughout the region,” stated John Seet, CEO of Nordic Solutions.

With this partnership, Nordic Solutions’ customer base can anticipate a more robust and integrated defense. The blend of Nordic Solutions’ unparalleled suite of comprehensive IT services, combined with the AI-powered dynamic browser approach from ConcealBrowse, ensures that Nordic Solutions’ clients can identify and neutralize emerging threats with greater efficiency and speed.

About Conceal

Conceal’s mission is to defend organizations against web-based threats. ConcealBrowse is a private, lightweight, easy-to-deploy AI-powered browser extension that detects, prevents, and shields users from ever-evolving phishing, credential theft, and other sophisticated social engineering attacks. By securing the most vulnerable part of any organization, the human using a web browser, ConcealBrowse dramatically reduces the risk of destructive and costly cyber-attacks. For more information, visit https://conceal.io/conceal-browse/

About Nordic Solutions

Nordic Solutions (Asia) Pte Ltd, established in 2014, is a prominent cybersecurity distributor dedicated to shaping the future of technology solutions in the Asia-Pacific region. With a strong foundation in distribution and Managed Services, we have continually evolved to offer a comprehensive suite of services. Our divisions include Cybersecurity, Drone Solutions and Services, and Digital Transformation. For more information, visit https://nordic-solutions.asia/

Source: https://www.businesswire.com/news/home/20240119519023/en/Conceal-Announces-Expansion-into-Southeast-Asia-with-Nordic-Solutions-Partnership

Browser-Based Threat Report: Jan 15

/in /by

Browser-Based Threat Report

Week of January 15th, 2024

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of January 15th, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 97296b4ff7ddfff97b2e7c34976ed0cdf7e8504ef9dd23618de7c4e092f581c0

Browser-Based Threat Report

Browser-Based Threat Report

ConcealBrowse first detected this URL on January 10th, 2024, the same day other security vendors started reporting. To date, only 5 vendors have identified this URL, labeling it as malware and malicious. Conceal prevented this new threat, further assigning a 27% risk and highlighting the importance of real-time analysis.

Non-affiliated webpages that push custom video game components such as cursors should be viewed cautiously. Sites like this are often not moderated and push custom-scripted game components. This specific site is loaded from an IP address that security vendors have flagged as malicious. This IP also delivers similar domains that have been flagged and use the same naming convention, such as videogame-cursors[.]online. In fact, a handful of these domains were also isolated by ConcealBrowse. This site and many of these domains are still active and should be avoided.

_____________

SHA-256: c3122370c2de5692438103f45f8ef14be899cc40e4c3946719f4a813cd7ca735

This URL was detected by ConcealBrowse on January 10th, 2024. It was first identified by 2 security vendors on the same day, with 3 reporting to date. ConcealBrowse intervened assigning the page a 14% risk due to suspicion.

Upon first look, the webpage itself is using a malicious Top-Level Domain (TLD) that is notoriously used globally for malware distribution and phishing campaigns. The domain itself is also leveraging deception, as there is a legitimate Robin AI used by many. Due to this, vendors have annotated this site as phishing. Further, the page is seen downloading an HTML file that has also been annotated as suspicious by two reputable anti-virus vendors. More grandeur, the hosting IP address was flagged and is delivering other copycat websites to users. With that, users should always confirm login page addresses before divulging credentials and other personal information.

Browser-Based Threat Report

Browser-Based Threat Report

_____________

SHA-256: ccd95eea7f0337b08e5888f68c92098294ee889cb540a9de8a52e003f41ec680

Browser-Based Threat Report

Browser-Based Threat Report

The URL was detected by ConcealBrowse on January 16th, 2024. It was detected by various security vendors on January 16th, 2024, and currently is flagged by 2 vendors. This delivered page is classified as malware and malicious by those 2 vendors. ConcealBrowse interdicted this page and prescribed a 22% risk score.

The webpage was seen redirecting to a Yahoo webpage that loads various scripts from third party hosting sites in the process. The page was seen delivering suspicious downloads that have matched various crowdsourced YARA rules for encoded content. This is often used to bypass security mechanisms by encoding script so that it cannot be detected. Although it loads a legitimate Yahoo page, upon delivery there are callouts to third-party hosting sites to execute the various scripts to initiate downloads. Due to this, the page should be avoided.

_____________

Valuable Outcomes

As this recent threat reports exemplify, ConcealBrowse offers comprehensive protection against many sophisticated cyber threats. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to confidently navigate the digital landscape, knowing that their online activities are shielded from potential harm.

Join the Conceal Community and claim your FREE ConcealBrowse licenses!

Join the Conceal Community today and fortify your online security for free! Don’t miss the chance to benefit from our advanced threat protection and stay one step ahead of cybercriminals. Experience peace of mind while browsing the internet, knowing that ConcealBrowse is your shield against the ever-evolving threat landscape. Take the proactive step towards a safer online experience – get your free ConcealBrowse license now and join a community committed to safeguarding your digital world.

Sign up for the Conceal Community and claim your free licenses by completing the form below.


Grove Case Study Website Feature

Browser Security Case Study: Toyota Tanzania

/in , /by

Overview

Toyota Tanzania, a prominent player in the automotive industry, has a rich history rooted in East Africa. With a legacy dating back to 1825, the Karimjee family introduced the Toyota brand, which has since become synonymous with quality, reliability, and innovation. Operating in vehicle importation, spare parts distribution, and after-sales services, Toyota Tanzania is committed to the global after-sales service standard, known as “Kodawari.”

In an era of digital transformation, the automotive industry faces evolving cybersecurity challenges. Connected vehicles, intricate in-car systems, and the proliferation of Internet of Things (IoT) devices increase the attack surface. Abdulaziz Raudha, IT Manager at Toyota Tanzania, sheds light on the complexities: “People are browsing on various devices; how do you protect them all? You can secure your computers on your network perimeter, but how do you manage remote endpoint devices?

Challenge

Despite conventional security measures, Toyota Tanzania encountered a critical challenge: the vulnerability of saved credentials. Raudha recounts an incident where hackers targeted the CEO and directors, exploiting saved credentials to gain unauthorized access, emphasizing that even seemingly secure networks are susceptible.

Solution

Enter Conceal, a transformative solution described by Raudha as an “armor for most things we are not aware of. “Conceal’s Zero Trust approach and AI-driven browser security offered a game-changing paradigm in cybersecurity. Raudha highlights the significance: “As we move with technology and IoT takes place, humans have weaknesses. You can’t rely 100% on humans. Conceal spots small things that we might not pick up.”

The Result of Implementing Browser Security

Conceal’s implementation proved instrumental in bolstering Toyota Tanzania’s cybersecurity posture. Raudha praises the solution’s seamlessness, reporting capabilities, and intelligence: “It actually makes my life so much easier. AI is a game-changer technology. You can relax at home knowing you are secure.” The isolation of users on sites and the proactive identification of potential threats showcased Conceal’s effectiveness. ConcealBrowse’s intelligence engine and Zero Trust isolation technology, combined with Grove’s advanced cybersecurity solutions, create an ideal defense for your digital assets and brand. Our AI-driven browser isolation tool dynamically analyses code and moves suspicious elements to a secure cloud-based isolation environment, ensuring proactive threat mitigation.

“I am still to find a solution that does what Conceal does with AI. It’s seamless, makes my life easier, sends reports, and has great intelligence.”

Abdulaziz Raudha, IT Manager, Toyota Tanzania

Conclusion

Abdulaziz Raudha expresses gratitude to Conceal and Grove for their assistance, emphasizing the magnificence of Conceal’s Zero Trust solution. Looking ahead, Raudha plans to expand the user base, confident in Conceal’s ability to deliver unparalleled security. As Toyota Tanzania continues its commitment to excellence, Conceal stands as a vital partner in navigating the complexities of modern cybersecurity.

“Conceal checked so many boxes for the team at Toyota Tanzania, which made Conceal an obvious choice, a solution that delivers what it promises and so much more beyond the marketing. A solution which once was implemented was a set and forget solution, and real benefit was derived from day one, no lengthy ROI, immediate time to value! Working with a knowledgeable IT Manager such as Abdulaziz is so reassuring, knowing he holds security as the primary focus for the organisation, and this should give the CEO whom he works closely with great confidence. His depth of experience and expertise is rare to find, as we see diminishing skills in Cyber and IT, Abdulaziz understands what is needed and delivers.”

Bianca Dafel, Business Development Manager | GROVE

 

This Case Study illustrates not only the challenges faced by a leading automotive player but also the transformative impact of Conceal in fortifying cybersecurity defenses in an ever-evolving digital landscape.

Browser-Based Threat Report: Jan 8

/in /by

Browser-Based Threat Report

Week of January 8th, 2024

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs and other Browser-Based Threats. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of January 8th, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: e64f0fe9e6a80807640b81600c168af3e335a12d91b1dc2e2df20d2ae04fed8a

Browser-Based Threat Report

Browser-Based Threat Report

ConcealBrowse first detected this URL on January 8th, 2024. Only one other vendor annotated the URL on the 8th, and only 2 total vendors are reporting it as phishing at the time of this report. Conceal prevented this new threat, further assigning a 14% risk and highlighting the importance of real-time analysis.

Despite several vendors not identifying this page as malicious, it has been shown to download a phishing HTML to visitors, leverage hidden URLs and JavaScript, and the server where this site is hosted is also hosting cc, ru, and .ws domains. Adversaries commonly use these TLDs.

_____________

SHA-256: bb4cd8d523d0ce1ee335b18573829db74b8ccca8d386e0badcb7d75aa1c2dedc

ConcealBrowse detected this URL on January 8th, 2024. It was first identified by 7 security vendors on August 24th, 2023. ConcealBrowse intervened as the webpage loaded to the endpoint, assigning the page a 38% risk.

The webpage uses a redirect, which loads a blank page currently. However, it was historically loading the screenshot pictured below. The webpage prompts the users to allow notifications that, once enabled, execute numerous JavaScripts found embedded within the webpage’s HTML source code. The body hash (annotated above) has been flagged by over 10 security vendors. These vendors classified the page as a known adware distributor. The domain listed above and the redirected domain should be avoided, as most of their subdomains have also been annotated as such.

Browser-Based Threat Report

Browser-Based Threat Report

_____________

SHA-256: fd2f020c87981687a1a05917e1e0f2f672533b29bf0d58d5ab6f945f7bdab389

Browser-Based Threat Report

Browser-Based Threat Report

The URL was detected by ConcealBrowse on January 3rd, 2024. It was detected by various security vendors on January 2nd, 2024, and is currently flagged by 15 vendors. Classified as malicious and phishing, this newly registered domain and subsequent webpage were further analyzed and deemed proximal by ConcealBrowse, meaning it is cohosted with other malicious domains.

Since the delivered webpage now has no content, it may appear safe. However, there is a lingering threat. ConcealBrowse flagged this webpage with our in-house indicator known as “proximity.” This means that the page is hosted on a server that hosts other sites known to deliver malware or phishing campaigns. After further analysis, the server has been seen to be hosting malicious sites. Some of these sites are delivering encoded files to their victims that enable them to bypass traditional antivirus products, exhibiting MITRE ATT&CK tactics such as defense evasion. Due to the affiliation with this enabling server, ConcealBrowse intervened.

_____________

Valuable Outcomes

As this recent threat reports exemplify, ConcealBrowse offers comprehensive protection against many sophisticated cyber threats. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to confidently navigate the digital landscape, knowing that their online activities are shielded from potential harm.

Join the Conceal Community and claim your FREE ConcealBrowse licenses!

Join the Conceal Community today and fortify your online security for free! Don’t miss the chance to benefit from our advanced threat protection and stay one step ahead of cybercriminals. Experience peace of mind while browsing the internet, knowing that ConcealBrowse is your shield against the ever-evolving threat landscape. Take the proactive step towards a safer online experience – get your free ConcealBrowse license now and join a community committed to safeguarding your digital world.

Sign up for the Conceal Community and claim your free licenses by completing the form below.


Browser Based Security: Why ConcealBrowse?

/in /by

In an age where 9 out of 10 attacks are initiated by phishing, your existing email security and web security gateway are vital but insufficient without browser based security. Here’s where ConcealBrowse significantly elevates your defense mechanisms:

Mitigating the Shift in Phishing Tactics:

  • Hackers are pivoting away from email phishing due to the prevalent security measures in place
  • The browser has become the hackers’ new favorite arena, but with ConcealBrowse, it becomes an impenetrable fortress

Dynamic AI-Driven Protection:

  • Static rules and predefined threat signatures are no longer adequate. With new malicious domains popping up daily, the security landscape is too dynamic
  • ConcealBrowse utilizes AI to proactively identify and mitigate threats, providing an adaptable shield against both current and emerging risks

Unmatched Browser-Based Visibility:

  • While your current tools work efficiently on the network, their visibility is inherently limited and basic due to encryption
  • ConcealBrowse, residing within the browser, provides continuous and comprehensive visibility, ensuring not even the minutest threat goes unnoticed

Guarding Against Information & Credential Theft:

  • Can your current technology discern and block stealthy, legitimate-looking phishing pages designed for information theft?
  • ConcealBrowse’s AI not only identifies these pages but also ensures that your users are safeguarded from falling prey to them, seamlessly and effortlessly

Protecting Beyond Corporate Emails:

  • Your existing email security is confined to corporate communications. What about the personal emails your users access through browsers?
  • ConcealBrowse is indiscriminate; it extends its robust protection to all email platforms accessed via the browser, whether Gmail, Hotmail, or any other

The ConcealBrowse Advantage:

  • Proactive Security: AI-driven protection actively learns and adapts to new threats, ensuring your security is always several steps ahead
  • All-Encompassing Protection: From corporate to personal emails, every communication channel accessed via the browser is under ConcealBrowse’s vigilant protection

Incorporating ConcealBrowse into your security architecture is not just an improvement; it’s an imperative. With its dynamic, AI-driven, browser-based protection, it fills the critical gaps left by your current security measures, providing a holistic, impenetrable defense mechanism against the ever-evolving threat landscape. Secure comprehensively with ConcealBrowse. Join the Conceal Community today and fortify your online security for free!

Browser-Based Threat Report: Jan 1

/in /by

Browser-Based Threat Report

Week of January 1st, 2024

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs and Browser-Based Threats. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of January 1st, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: b068837842db3d9756703c8924bfc1dcb2c0aa23c0a86f31bb71b62839f4bf6a

Browser-Based Threat

ConcealBrowse first detected this URL on December 28th, 2023. The URL was first reported on March 23rd, 2021, showcasing the continuous compromise and further suspicion surrounding the download site. Conceal intervened as the page loaded, assigning a 14% risk due to suspicion as the page had several signals that the detection engine identified.

The URL delivered a webpage that appears to host various video games on gaming platforms, which are available to download. The site asks the user to turn off their ad blocking features of the browser, enabling ads on the page. Although you may be able to download games from the site without issues, the likelihood of clicking an ad or downloading a Trojan via one of the video games is still high. This is the same issue found with Peer-to-peer sharing sites and torrent sites, as there is little to no moderation. Additionally, this site lacks Content Security Policy headers, making it susceptible to cross-site scripting and code injection attacks.

_____________

SHA-256: 8be6bc58004cbcefb2ec47155e19d904a5cd30d233e3fe4a82a1043839f65bb6

ConcealBrowse detected this URL on December 29th, 2023. It was first identified by three security vendors on October 3rd, 2023, and to date, by five vendors in total. ConcealBrowse intervened due to the abundance of signals around the page’s structure. With that, the site was assigned a 14% risk score.

The innocuous news site appears safe at first glance, giving insight to those seeking information on the Affordable Care Act and employee rights. Sites like this often use various marketing tags to track analytics to gain insight into their site visitors. These tags often rely on popular management systems such as Google Tag Manager, and one can see the HTTP requests from the page to the tag manager system. However, one such HTTP request from the site reaches out to a mimicked tag manager, which then loads the script to the page. The script, if loaded, notifies the user to update their browser, which runs a PowerShell script that introduces the NetSupport Remote Access Trojan to the endpoint. This gives adversaries remote access to the endpoint for follow-up actions. This active site should be avoided until the site admins remedy their issue.

Browser-Based Threat

_____________

SHA-256:67e5733c2974647897760ce1fd6e184a1508cc3a9df5da7372d6c981d2932abb

The URL was detected by ConcealBrowse on January 2nd, 2024, the same day that various security vendors detected it. To date, only seven vendors have identified this URL, classifying it as malicious and phishing. This highlights Conceal’s leading-edge technology that identifies threats in real-time before most CTI feeds catch on.

At first glance, the website is delivering a web browser that’s currently in beta testing. This browser, which claims to be privacy-minded, simple, and fast, has already been identified by various antivirus vendors as risky. In fact, 31 vendors have classified the browser as such, labeling it everything from riskware to a Potentially Unwanted Program to malware. Once downloaded, it is difficult to remove. Further, the browsing experience is problematic, as it has various redirects, often taking users to preferred search engines when using the URL search bar. This active site and, more importantly, browser application should be avoided.

Browser-Based Threat

_____________

Valuable Outcomes of Stopping Browser-Based Threats

As this recent threat reports exemplify, ConcealBrowse offers comprehensive protection against many sophisticated cyber threats. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to confidently navigate the digital landscape, knowing that their online activities are shielded from potential harm.

Join the Conceal Community and claim your FREE ConcealBrowse licenses!

Join the Conceal Community today and fortify your online security for free! Don’t miss the chance to benefit from our advanced threat protection and stay one step ahead of cybercriminals. Experience peace of mind while browsing the internet, knowing that ConcealBrowse is your shield against the ever-evolving threat landscape. Take the proactive step towards a safer online experience – get your free ConcealBrowse license now and join a community committed to safeguarding your digital world.

Sign up for the Conceal Community and claim your free licenses by completing the form below.


Browser-Based Threat Report: Dec. 25

/in /by

ConcealBrowse Browser-Based Threat Report

Week of December 25th, 2023

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs and Browser-Based Threats. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of December 25th, 2023, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

URL SHA-256: 8f14543dc1646ee7ebd2f5db2bc376c53dd4cba321a8ff0063557581514e9e3d
Exe. SHA-256: db7aeaa44d1b1e29e31fc0c1a148634b02f4914244bb1662eb47fc2b977405e5

Browser-Based Threat Report

This URL was first detected by ConcealBrowse on September 14th, 2023, and again on December 20th, 2023. The URL was first submitted for analysis by 3 security vendors on September 18th, 2023. Due to the increasing popularity of the URL, Conceal felt it necessary to include this in the weekly threat report. The URL has a 14% risk score due to suspicion which is based off 2 anomalies identified by our Sherpa AI engine.

The URL delivers a webpage that hosts a free privacy extension which claims to prevent ads and trackers found in everyday internet usage. The issue with this specific extension, is that it alters browser settings, assigning preferred search engines as default amongst other settings. Further, freeware like those that can be downloaded from the page above, populate their own revenue generating ad’s to make money, and more importantly collect and sell end user information to third parties. Due to this as well as the way this tool is delivered, via inconspicuous bundling, vendors have annotated the executable as a Potentially Unwanted Application (PuA).

_____________

SHA-256: a94da9bda65514cfe1df1bae85d7d386c84807327f3ac27d2f6cb4ba527c8f6d

This URL was detected by ConcealBrowse on December 26th, 2023. It was first identified by 2 security vendors on September 19th, 2023, and to date, by 6 vendors in total. The URL was isolated by ConcealBrowse with a 14% risk score due to 4 conclusive anomalies, including the use of a malicious TLD. Additionally, 4 links were identical yet labelled differently and there were 21 empty or void links detected. This is highly suspicious, indicating the site was rapidly created for a timing attack, which is supported by its registration date of September 9th, 2023.

Suspicion increased as analysis occurred, as the adversaries used effective titling such as “sale” and “2023” within the page and URL itself. This plays into the current holiday shopping theme and is an effective social engineering tactic used to convey legitimacy and relevancy to end users. When interacting with the site, certain links and text boxes were broken, which again highlights how rapidly the site was created. Sites like these are often recycled and registered to new domains, allowing them to bypass tools reliant on domain reputation. With real time analysis, ConcealBrowse intervenes, and conveys doubt to the end user about sites loaded in isolation. This site should be avoided as it may be phishing for credit card and personal information.

Browser-Based Threat Report

_____________

SHA-256: dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

The URL was detected by ConcealBrowse first on December 21st.It was first submitted to various CTI feeds on the same day. The domain was just recently registered on December 16th, with the first affiliated webpage already unavailable. The webpage has 132 siblings, that are also flagged by various security vendors, however, they are under construction and therefore their true intent remains unknown. This stresses the importance of real time analysis when the threat cyber intelligence lifecycle cannot act fast enough.

After some historical analysis, the URL was seen delivering a dating application. Although any ulterior motives of the application is unknown, security vendors have classified the URL and its subdomain as phishing and malicious. Additionally, it is important to note that the site uses a malicious top-level domain (which was identified by our Sherpa AI engine). The .live TLD is regarded as one of the top abused TLDs globally. Further, the IP address that delivering the domain in question, has been identified by 12 security vendors as malicious with over 200 flagged URL’s delivering pages from it. ConcealBrowse intervened, issuing a 27% risk score to the URL, leaning on intelligence previously mentioned, but mainly, on our Sherpa AI engine to keep the endpoint safe from the suspicious site. It is advised to avoid the subdomain and its siblings as their intent and motive is yet to be seen as they are currently under construction.

Browser-Based Threat Report

_____________

Valuable Outcomes of Browser-Based Threat

ConcealBrowse offers comprehensive protection against many sophisticated cyber threats, as recent threat reports exemplify. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to navigate the digital landscape with confidence, knowing that their online activities are shielded from potential harm.

Join the Conceal Community and claim your FREE ConcealBrowse licenses!

Join the Conceal Community today and fortify your online security for free! Don’t miss the chance to benefit from our advanced threat protection and stay one step ahead of cybercriminals. Experience peace of mind while browsing the internet, knowing that ConcealBrowse is your shield against the ever-evolving threat landscape. Take the proactive step towards a safer online experience – get your free ConcealBrowse license now and join a community committed to safeguarding your digital world.

Sign up for the Conceal Community and claim your free licenses by completing the form below.


Threat Report Website Feature - 12.18.23

Browser-Based Threat Report: Dec. 18

/in /by

Browser-Based Threat Report

Week of December 18th, 2023

ConcealBrowse is leveraged by teams across the world to combat weaponized URLs and Browser-Based Threats. The technology is constantly analyzing suspicious web artifacts to identify risks in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of December 18th, 2023, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: c3c3f907fd925366cc657147828696deaf0494bff7d5d9b39d62bb6b5e4e5cf2

weekly threat report 12.18.23 Screenshot of the suspicious webpage

This URL was detected by ConcealBrowse on December 15th, 2023, and assigned a 14% risk score due to suspicion. The URL was first classified by 2 security vendors in September of 2019 as malicious and phishing. This URL has a long history of delivering a compromised and suspicious page and to date has been annotated by 5 vendors as such.

Upon further investigation, there are multiple reasons why this site is continuously flagged. First, the site itself is a WordPress site, which without proper configuration, has numerous vulnerabilities by default, from compromised themes to insecure plugin integrations. That aside, the page is also delivered from an IP address that has historically delivered Trojans (most recently on December 12th) as well as Potentially unwanted Programs (PuPs) and Potentially unwanted Applications (PuAs). This exemplifies the dangers of shared hosting which could lead to the demise of the webpage in question, and further, the endpoints connecting to it.

_____________

SHA-256: 29ee53339a87040fd5b852e2d8542e9498812fb3fd689c25a4b3b4cf492220ce

This URL was detected by ConcealBrowse on December 14th, 2023. The URL in question was first identified December 13th, 2023 as delivering malware and a phishing webpage by 4 security vendors. 6 additional security vendors have since deemed the page as dangerous, totaling 10 vendors to date.

Spoofed websites, like the one delivered by the URL in question, are popular during this time of the year as the adversaries know there will be increased visitors. This site replicates the USPS homepage and even subpages. After a few minutes on the page, it is obviously spoofed with broken links. Conceal’s Sherpa AI engine detected multiple anomalies, identifying this site as malicious. The spoofed site was isolated with ConcealBrowse due to its intention of collecting credit card information from the unassuming, allowing users to add items such as stamps to their cart and proceed to a checkout screen.

weekly threat report 12.18.23 screenshot of spoofed USPS page

_____________

SHA-256: 60d387d2967c2e63a962333387768228a9d2b379829ebc3670ae6d4788f052e0

SHA-256: f248e02fe1c54a766640b8f2257b18d2f496a8642bac1b03ec52e26e2fbc6e93

The URL was detected by ConcealBrowse first on November 4th, and subsequently on December 14th, 2023. It was first submitted to various CTI feeds January 15th, 2022, with its final URL just recently submitted December 19th, 2023. The original URL and final URL have been classified as malicious and phishing by 5 total security vendors. This highlights the domain’s ability to continuously circumvent traditional security mechanisms.

The URL above has multiple final URL’s that have been used in malvertisement campaigns historically. As seen below, once a user clicks on the malicious advertisement, their browser displays warning messages, stating they have outdated drivers. This tactic is used to scare end users into downloading malicious drivers to their endpoint. Although the URL today leads to a parked domain, meaning the adversaries are no longer using their website, they could easily commence this attack even though the domain is on a few DNS blocklists. They would be successful against those without informed DNS providers, however, would not be successful against those with ConcealBrowse.

weekly threat report 12.18.23 Historical screenshot pictured left, with current status (parked domain) pictured right

 

_____________

Valuable Outcomes

ConcealBrowse offers comprehensive protection against many sophisticated cyber threats, as recent threat reports exemplify. Our advanced threat detection capabilities have successfully flagged and quarantined malicious web pages, preventing users from falling victim to various cyber-attacks. Conceal remains dedicated to upholding the integrity of online interactions, constantly refining our detection algorithms and threat identification protocols to ensure proactive protection against emerging cyber threats. By integrating cutting-edge technology and a robust security infrastructure, we empower users to navigate the digital landscape with confidence, knowing that their online activities are shielded from potential harm.

Join the Conceal Community and claim your FREE ConcealBrowse licenses!

Join the Conceal Community today and fortify your online security for free! Don’t miss the chance to benefit from our advanced threat protection and stay one step ahead of cybercriminals. Experience peace of mind while browsing the internet, knowing that ConcealBrowse is your shield against the ever-evolving threat landscape. Take the proactive step towards a safer online experience – get your free ConcealBrowse license now and join a community committed to safeguarding your digital world.

Sign up for the Conceal Community and claim your free licenses by completing the form below.


Browser Based Security

Conceal’s Year in Review: Innovations, Challenges, and Successes

/in /by

As we bid farewell to another eventful year, it’s time to reflect on the milestones, challenges, and triumphs that have shaped Conceal over the past twelve months. This year has been a testament to our commitment to advancing cybersecurity and protecting our clients from ever-evolving digital threats. 

Milestones Achieved

Expanding Our Product Range

Launch of New Features: This year saw the introduction of a series of groundbreaking features and products at Conceal. Notably, we achieved extensions for Firefox and Microsoft Edge, significantly broadening our browser security coverage. We also saw the launch of advanced tech alliances and integrations, enhancing user security and experience. Some of our most notable and impactful highlights include coverage for the Firefox browser, an innovative end-user information panel, a device-based installation process, and MSI installer package support.

AI Engine: We proudly upgraded to our AI engine, a leap forward in real-time web page analysis. This engine is designed to understand patterns in behavior, structure, and content, elevating ConcealBrowse’s analytic capabilities. 

Upgrades to Existing Features: This year, in additional to releasing our SherpaAI engine, we enhanced the end-user experience with upgraded dashboard elements, search by device labels, and notable integrations into platforms like Connectwise, Datto, Splunk, Devo, and SentinelOne.

Growth and Expansion

New Partnerships: This year marked the forging of significant partnerships, contributing immensely to Conceal growth. Each partnership brought unique strengths to our platform. These partnerships include Thousand Guards, MorugaIT, Grove, Kompingo, Hyprfire, Brigantia, NobleTec, Binary Defense, SentryMark, White Rock Cybersecurity, CyberForce Security and Next Generation Security.  

Expansion into New Markets: Our venture into new markets has been a resounding success, particularly in the MSP sector. We’ve seen a 450% quarter-over-quarter growth from CYQ2 to Q3, with similar trends projected for CYQ4. Key expansions included entering the Japanese market with SentryMark, significant growth in the UK/EU through partnerships with NGS, Kompingo, and Brigantia, and establishing our presence in New Zealand.

Conceal Community Initiatives: The launch of a free NFR Community for MSPs and offering 5 Free licenses for Enterprises has proven to be a successful strategy, continually attracting more users.

Overcoming Challenges

Navigating the Cybersecurity Landscape

This year, the cybersecurity world has been fraught with challenges, particularly the rise in ransomware and credential theft. Conceal has proactively adapted to these threats, ensuring robust protection for our clients.

Internal Growth and Development

Our internal structure saw significant changes, especially with the transition of BDRs to ISRs. This internal development has been pivotal in managing our rapid growth, particularly in the MSP sector.

Success Stories

Empowering Users and Organizations with ConcealBrowse

As Conceal celebrates a year of significant achievements and advancements in cybersecurity, we’re proud to share some remarkable success stories that highlight our impact:

Enhancing User Security Despite Training Limitations: A key testament to ConcealBrowse’s effectiveness comes from an appreciative user: “I like that ConcealBrowse is an antidote to the failure of people to follow their Security Awareness Training. They click on email links and search result links despite any training. Especially, I like that ConcealBrowse adds a critical layer of protection against the growing threat of ransomware.” This feedback underscores our solution’s ability to compensate for human error and provide a robust defense against emerging cyber threats.

Collaborative Success with VAR Partnerships: Our collaboration with Value-Added Resellers (VARs) has been particularly fruitful. One Account Executive/Marketing Events Coordinator shares, “The team at Conceal is very collaborative, flexible, and adaptable, fitting our customers’ needs across various verticals. They’ve gone out of their way for account mapping and solution overviews, leading to co-selling opportunities.” This partnership has been pivotal in scaling our solutions to businesses of all sizes, proving the adaptability and effectiveness of ConcealBrowse.

Transformative Impact on Toyota Tanzania: At Toyota Tanzania, IT Manager Abdulaziz Raudha hails ConcealBrowse as a game-changer: “Conceal’s Zero Trust approach and AI-driven technology offered a game-changing paradigm in cybersecurity… You can relax at home knowing you are secure.” The implementation of our solutions has significantly strengthened their cybersecurity posture, showcasing the power of AI in contemporary digital defense.

City of St. Peters – A Model for Municipal Cybersecurity: The City of St. Peters’ integration of ConcealBrowse into their IT infrastructure demonstrates our solution’s versatility and effectiveness in public sector environments. An IT administrator from the city lauds the product: “ConcealBrowse’s innovative approach to cybersecurity… has significantly enhanced our network security while maintaining user-friendliness and minimal administrative overhead.” This case exemplifies our commitment to providing solutions that are both powerful and user-friendly.

Awards and Recognitions

This year, Conceal was honored with several awards, including being a finalist in the CISO Choice Awards for Endpoint and Email Security, winning the Black Unicorn Awards, and being named MSP Today Product of the Year. Additionally, we received accolades for the Best New Solution and Most Innovative Solution at the ChannelPro SMB Forum. 

Looking Ahead: The Future of Conceal

Upcoming Innovations

Looking forward, we are excited about further innovations, including greater API support, mobile device protection, support for Safari, enhanced site isolation information, and a user feedback system. We are also focusing on expanding our Inside Sales team in Augusta, GA, and the UK.

Commitment to Excellence

Our unwavering commitment to excellence remains at the forefront of our endeavors. We continue to innovate and lead in the fight against cyber threats, ensuring the best possible solutions for our clients.

As we reflect on this year, our gratitude extends to our customers, partners, and employees whose support has been invaluable. Conceal remains dedicated to its mission, continually striving for excellence in cybersecurity. Here’s to a year of challenges turned into opportunities and milestones that pave the way for a safer digital future.