Barracuda Spam Firewall blocks phishing attacks targeted at salesforce.com users

(11/01/2008)

Barracuda Networks, Inc. has announced that its Barracuda Spam Firewall has implemented specific countermeasures to block the phishing malware attacks targeted at salesforce.com users. These attacks were outlined in a broadcast email yesterday to all salesforce.com users advising them of the latest malware threat.

The attack on the salesforce.com user base is a variant of known attacks that attempt to lure users into installing malware that can collect passwords to online systems, including banks, credit cards, shopping Web sites, and even salesforce.com itself.

“What makes this form of the attack unique is its social engineering,” said Stephen Pao, vice president of product management for Barracuda Networks. “The email masquerades itself as part of the Salesforce Identity Confirmation feature, which ironically was intended to enhance legitimate salesforce.com security measures against the latest wave of phishing attacks. Because of its clever design, unsuspecting salesforce.com users may inadvertently install the malware.

“While existing defence layers targeting malware in the Barracuda Spam Firewall have been effectively blocking these attacks, Barracuda Central today added another layer of defence specifically targeting this social engineering,” added Pao.

Barracuda Central responded to the salesforce.com announcement by quickly adding additional levels of protection in the event that the attack starts using new malware variants. The additional levels of protection involve rules that actually block the social engineering around the Salesforce Identity Confirmation feature in addition to the malware.

“Just as Barracuda Networks was the first major appliance vendor to target the attacks against Adobe Reader users in 2007, we are proud to be the first to specifically target the attacks against salesforce.com users in 2008,” said Pao. “The tactical response of Barracuda Central combined with the Barracuda Spam Firewall's 12 defence layers allows us to continue to supply the best spam protection at the best value in the industry.”

Related topics:  Internet and Web security   Virus, Worm, Email security, spyware and malware 

Print version | Email to a friend | Related articles

Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.

Other Security news and resources