photo #6966358

Hackers often attack Secure Email Gateways (SEGs) to bypass security measures and gain access to private communications.Once they have attacked SEGs, they can snoop on emails, change them or even start a phishing scheme that will spread malware and steal sensitive information from the organizations involved.Cybersecurity researchers at Cofense recently discovered that hackers have been actively attacking and bypassing the SEGs with sophisticated malware exploits.Technical AnalysisSecure Email Gateways (SEGs) have a vulnerability that threat actors are actively exploiting by sending them corrupted .zip archives.These archives contain HTML files with .Mpeg extensions that enable obfuscation of harmful content from SEG scans.