Barracuda Security Insight Platform Reveals Highly Weaponized File Types

CAMPBELL, Calif., Feb. 15, 2018 /PRNewswire/ -- Barracuda Networks, Inc., a leading provider of cloud-enabled security and data protection solutions, today announced the availability of Barracuda Security Insight. The new advisory platform offers detailed real-time threat intelligence and security risk information to help consumers and IT professionals remain aware of current global threat levels.

By analyzing data collected from Barracuda endpoints all over the globe, Barracuda Security Insight helps determine the current cybersecurity threat level based on email, network, and web traffic flows. It provides summaries and detailed views of current threat campaigns that Barracuda tracks in real-time.

Some of the recent threat trends revealed by Barracuda Security Insight include:

• PDF files represent the highest volume of weaponized file types to be transmitted through observed attack surfaces due to their ability to be simply constructed and easily transmitted. PDFs scanned in the last three months showed nearly 41 million were part of an attack. PDFs often contain links to bad sites and active scripts.
• The most sophisticated attacks with the highest efficacy are carried over embedded scripts such as JavaScript (JS) and VisualBasic (VB). Recent findings revealed that over 75 percent of these scripts are malicious. Scripts can be embedded in html, or other rich document formats such as rtf and Office. A sample of 70 million Office documents scanned in the last three months found more than 4.7 million to be malicious or suspicious.
• Compressed files are an increasingly popular way for criminals to transmit disguised attacks and hide non-malware infections such as PowerShell (PS) scripts. An example of this took place in September of 2017 when Barracuda detected and blocked a massive ransomware campaign with over 27 million emails reaching customers in less than 24 hours. 

These threat trends gathered by Barracuda Security Insight are expected to continue with extensive use of weaponized file types to carry out massive attacks. In addition, the Equifax breach and other cybersecurity events have resulted in the significant loss of personally identifiable information (PII) for millions of consumers. Barracuda expects to see an increased use of this information for both mass phishing and targeted spear phishing attacks.

"Organizations often become aware of vicious cyberattacks after the damage has already been done," said Fleming Shi, SVP of Technology at Barracuda. "By offering a free global advisory platform like Barracuda Security Insight, we can help heighten security awareness by proactively identifying the most current threats that should be on everyone's radar. Those who use the platform can ultimately gain a better understanding of the threat landscape in real-time ? an awareness that can lead to an overall improved security posture."

How Barracuda Security Insight Works
Barracuda analyzes large volumes of global threat intelligence from several sources and presents this through Barracuda Security Insight in the form of easy to read threat trends, detailed information on attack campaigns and an aggregated threat score.

Barracuda Security Insight includes real-time activity seen from the following traffic:

• Email: Includes email-borne attacks containing malicious links and attachments, malware, ransomware, and botnets.
• Network Perimeter: Includes zero-hour vulnerability exploits, brute force attacks, DDoS, spyware, and spam.
• Web Access: Includes web browsing attacks involving ransomware, malware, and vulnerability exploits in the wild.
• Endpoints: Includes malware, persistent spyware, botnets, ad and click fraud, IoT malware, and compromised dead apps.

Barracuda Security Insight is currently offered at no cost. It is available via the Barracuda website and also provides an open API integration into applications from common web portals and dashboards, and digital assistants such as Alexa. To access Barracuda Security Insight today, please visit https://csi.barracuda.com.

About Barracuda Networks, Inc.
Barracuda simplifies IT with cloud-enabled solutions that empower customers to protect their networks, applications and data, regardless of where they reside. These powerful, easy-to-use and affordable solutions are trusted by more than 150,000 organizations worldwide and are delivered in appliance, virtual appliance, and cloud and hybrid deployment configurations. Barracuda's customer-centric business model focuses on delivering high-value, subscription-based IT solutions that provide end-to-end network and data protection. For additional information, please visit barracuda.com.

Barracuda Networks, Barracuda, and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the US and other countries.  

Forward-Looking Statements
This press release contains forward-looking statements, including statements regarding the potential benefits, performance, and functionality of Barracuda Security Insight. You should not place undue reliance on these forward-looking statements because they involve known and unknown risks, uncertainties and other factors that are, in some cases, beyond the Company's control and that could cause the Company's results to differ materially from those expressed or implied by such forward-looking statements. Factors that could materially affect the Company's business and financial results include, but are not limited to customer response to the Company's products, as well as those factors set forth in the Company's filings with the Securities and Exchange Commission. The Company expressly disclaims any intent or obligation to update the forward-looking information to reflect events that occur or circumstances that exist after the date of this press release.

Contact
Jesse Kimbrel                                                
Barracuda Networks, Inc.                  
408-342-5683
[email protected]  

SOURCE Barracuda Networks, Inc.