Forest Global Training Partners

Cyber Risks · Cisco Talos

Why don’t we sit around this computer console and have a sing-along?

Summary: Cisco Talos reports widespread abuse of cascading style sheets (CSS) properties to embed hidden text, or salt, in malicious emails, with attackers placing it in the preheader, header, attachments and body using characters, paragraphs and comments by manipulating text, visibility and sizing properties. Talos says hidden content appears far more often in spam and other email threats than in legitimate emails, challenging both basic and advanced email defenses that use machine learning.

What's compelling: Talos recommends detecting hidden text and filtering out the added salt before messages reach downstream detection engines, because the salt is designed to slip past the machine-learning filters those engines rely on.

Read the original at Cisco Talos ↗

Topics
Malware
Related