It employs four colors to indicate expected sharing boundaries to be applied by the recipient(s). TLP is a set of designations used to ensure that sensitive information is shared with the appropriate audience. The Traffic Light Protocol (TLP) was created in order to facilitate greater sharing of information. These included warnings sent by the BSI marked as TLPGreen and Amber.
In some cases these were confidential documents. In March of 2022 the German Bundesamt für Sicherheit in der Informationstechnik (BSI) which translates as the Federal Office for Security in Information Technology, warnedthat it noticed the (semi)-automated upload of suspicious or quarantined email attachments. This is done to increase malware detection across the participating solutions, but also to enable threat hunting and provide a historical and current overview of the threat landscape. VirusTotal offers premium servicesthat allow participants access to files that were uploaded by third parties. But in case of a targeted attack, getting the all-clear from VirusTotal does not mean the attachment is safe to open or edit. It may recognize malicious attachments, especially the ones that are used in mass email campaigns, since these samples may get uploaded more often.
VirusTotal maintains a collection of over 70 endpoint protection solutions, but it is important to realize that there is no guarantee that the version that VirusTotal relies on is the same version that you would be running, or whether it is as up to date as your version might be.īut in the context of this article it is even more important to realize that VirusTotal was not designed to check whether an attachment is malicious. Many use VirusTotal as a “second-opinion” scanner which is obviously fine to do on occasion.
It does this by scanning the submitted files with the contributing anti-malware vendors’ scanning engines. VirusTotal is now part of Google Cloud and its goal is to help analyze suspicious files, URLs, domains, and IP addresses to detect cybersecurity threats. But apparently some organizations have automated the uploading of email attachments without really thinking through the possible consequences. We have warnedagainst uploading personal information, as does VirusTotal itself on their home page. It is important to realize that uploading certain files to VirusTotal may result in leaking confidential data, which could result in a breach of confidentiality, or worse.
0 kommentar(er)
