Phishing is the practice of sending email to users with the purpose of tricking them into clicking on a link or revealing personal information. LibraCyber ESG has the 3 powerful modules to prevent the phishing from working.
Whaling Protection (BEC)
Whaling is a type of phishing fraud that targets high-profile end-users such as C-level corporate executives, politicians, and celebrities.
You can configure this feature by assigning one or more email addresses that belong to an user. In this way, through a series of controls, if an attacker tries to impersonate a CEO or a manager, the appliance blocks the mail as "Whaling Fraud".
You can also configure an email notification to the recipient target of the Whaling attempt.
The impersonation protection engine analyzes emails directed to the domains of the C-level persons configured in this table. The domains are derived from the entered email addresses and from the domains of all the email aliases of these users (if available).
This is important, especially in a MSP setup: each "whale" entered in this table is only regarding its domain(s).
Example: Entering first.last@domain1.com causes the engine to analyze the email directed to domain1.com for impersonation attempts of this person. If this email address has some email aliases on other domains also email directed to those domains is analyzed. If you want domain2.com to be also protected by impersonation attempts on this person, just enter a new entry with the same name and an email address like first.last@domain2.com. Now also email directed to domain2.com will be checked for impersonation attempts on this person. It does not matter if this last email address does not exist.
In the Whaling Protection section of the page is displayed all the existent whaling protection policies. You can filter out results by performing a Search and save the results in common formats by clicking on the Export button.
To add a whaling protection record you can click on the New button on the table toolbar, fill in the below gaps and click the Apply Settings button in the toolbar in order to make changes effective.
External Warning
A message coming from outside your organization from a First Time Sender may be dangerous. LibraCyber ESG can place an inline warning at the top of the body when a message is from an external source and the sender is the first time he is writing to you. This message helps to pay more attention to the message avoiding phishing attempts to works.
In this section section you can Enable or Disable the External Warning module and create exceptions in order to avoid the warning message to be placed on trusted email flows.
Below is an example of an External Warning message.
Note: you can customize the inline warning string from the User Messages page, in the External Warning tab.
Exception list
In this table are displayed all the External Warning exceptions. You can filter out results by performing a Search and Export data in common format such as PDF and CSV. To Delete one or more records from the table you can select them and click the red trash icon from the toolbar.
You can create a new exception by clicking on the New button from the table toolbar and fill the gaps as below.
Phishing Highlight
Phishing Attacks look like a genuine email messages which contain a link to click on to take you to the website where you will be asked to type in personal information.
Common frauds are already blocked by LibraCyber ESG as spam or phishing messages, this check helps you alert your users with potential unsafe links. These links are those where the real address of the link in the message is not the same as the text that appears to be the link or are simply numeric links, very hard to understand.
You have two options here:
- Technical Phishing Highlighting (highlights link anomalies such as a <href> tag instead of a visible plain link)
- Numerical Phishing Highlighting (highlights link anomalies such as links to numeric IP addresses instead of plain links)
When these settings are enabled and LibraCyber ESG finds an unsafe link, will simply prepend a red string alerting the user about the following link. Below is an example of an a phishing highlighting message.
Note: you can customize the inline warning string from the User Messages page, in the Phishing tab.