Cisco Talos Email Filtering provides reputation-verdict and categorization services in support of Cisco email security products. Multi-layered defenses protect customers from email threats, spam, and graymail. Talos Email Filtering examines URLs and file attachments contained in emails, as well as IP and Domain reputations of senders, to block malicious, unwanted, and inappropriate emails. The Talos research team has the experience of experts in over 40 languages to review and classify messages.
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.
Dissecting the JWR phishing framework
Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines
Cisco Talos has recently observed an increase in activity that is leveraging notification pipelines in popular collaboration platforms to deliver spam and phishing emails.
Qilin EDR killer infection chain
This blog provides an in-depth analysis of the malicious “msimg32.dll” used in Qilin ransomware attacks, which is a multi-stage infection chain targeting EDR systems.