Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Company
Platform
Modern NDR
Resources
Company
DETECTION OVERVIEW
Risk Factors
It is relatively easy and common for an attacker to run a botnet that delivers large amounts of spam to an email server. Spam emails might be part of a phishing campaign that is impersonating your organization to collect sensitive information, such as usernames and passwords. A spike in email traffic, related to either malicious activity or a mass of distribution list replies, might create a denial-of-service (DoS) scenario, which can have a significant impact to a business if email service is blocked for employees or customers.
The system might change the risk score for this detection.
Category
An attacker launches an email phishing campaign to gain access to sensitive information such as passwords, account numbers, or customer data. Email messages that look like legitimate requests for information are sent in large volumes to SMTP servers and might cause disruptions in regular email traffic.
Examine source traffic to locate botnet activity, malware, or compromised devices
Add multi-factor authentication to SMTP servers
Block source addresses of spam emails
Block ports and protocols targeted by spam emails
Network analysis and visibility solutions remain underrepresented in enterprises. Find out why in this preview of a new Wave report.
ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response
Visit this resource for more information.
This analysis exposes the critical link between an organization's lack of internal visibility and the escalating cost of compromise, demanding an urgent re-evaluation of how core business assets are protected.
Learn why you need to be wary of the claims certain network detection and response providers make about their coverage against the MITRE ATT&CK framework.
Learn how NDR from RevealX helps security teams detect and investigate more adversary TTPs in the MITRE ATT&CK framework than rule-based tools.
