Services

Identity Theft

Identity Theft Incidents

Identity Theft Incidents occur when a user claims to be a legitimate enterprise in an attempt to scam private information from a user.  Cost to the enterprise includes financial losses by individual customers and loss of trust in the organization meant to be protecting them. (See common questions on the cost of phishing)

Identity Theft includes, Phishing; the use of email scams. Vishing; The use of Telephone and Voice over IP scams and SMShing; which are SMS based Scams and ever more sophisticated attempts by criminals to avoid detection. (See common questions on phishing, and common questions on Rock Phishing).

In addition to the above there is the potential of scams including Malware. Malware is software designed to infiltrate or damage a computer system without the owner's consent. 
To ensure that we are targeted in as many Identity Theft schemes as possible, BrandProtect continuously publishes thousands of email addresses in high-risk online environments.  As a result, our email servers are inundated with emails every second of the day.  Each time a new email is received our software conducts an automated analysis to determine the brand exposed and type of attack.
Once a threat is detected our team is able to analyze it, determine the level of threat that it poses and transfers it to our Incidence Response Team, which is able to eliminate/take-down the threat.

Our incidence response teams in America, Europe and Asia with the assistance of more than 3500 Internet service providers, covering more than 95% of the web, have a perfect (100%) take down record and have among the fastest take down times in the industry. (See common questions on our takedown process).

For information on our Phishing and Internet threat protection turnkey solution for smaller financial institutions and credit unions, Strikephish ™, please click here.

Phishing, Vishing, SMShing Detection

We continuously publish thousands of email addresses in high-risk online environments. As a result, our email servers are inundated with emails/spam. These “honeypots” are continuously being analyzed by our software to determine if they contain threats. Any threats discovered that affect our customers are immediately sent out as threat Alerts. This way our customers can proactively respond to and mitigate any potential threats.

Malware Detection

Through agreements with leading threat centers globally, and our own ”honeypots”, we aggregate and analyze malicious threats. The resulting data feeds allow our customers to proactively respond and mitigate potential threats.

Malware Analysis and Mitigation/Take-down

We analyze emails, attachments and websites that have been found to contain Malware to determine the locations of command and control (C&C) servers, peer addresses, and methods of communications. We also use forensic data from our analysis to assist our Incident Response Team in determining the appropriate approach or to enlist the assistance of ISPs and authorities so that the botnets creating the threat can be closed down and eliminated.

Abuse Box Forwarding

Many companies, especially financial institutions will provide an avenue for their customers who believe they have received a fraudulent email to forward that email for analysis to what is known as an “Abuse box”. Our Abuse Box forwarding service allows our software to provide immediate and ongoing analysis of all the emails received for possible threats. This is a very cost effective service automating what may be a significant work load and at the same time providing instant 24x7 coverage which eliminates delays in shutting down fraudulent sites.

Phishme.com™: Phishing attack simulation for
employee education

PhishMe.com is a software-as-a-service (SaaS) solution designed to help prevent damage, theft and loss caused by targeted spear phishing attacks. PhishMe.com has been adopted by Federal Agencies and Fortune 1000 companies across multiple vertical market sectors including Financial Services, Healthcare and Defense Contracting. PhishMe.com facilitates and automates the execution of mock phishing exercises against employees, provides clear and accurate reporting on user behavior, and most importantly provides instant, targeted employee training. Benefits include:

  • Compliance with annual security audits and required training
  • Protecting employees from Identity Theft at both work and home
  • Helping employees to educate customers on Phishing

Identity Theft


RESOURCES