Another year goes by and along with it a string of Marvel films and TV shows. One could be forgiven for trying to keep up with the ongoing latest batch of heroes and villains, Moon Knight and She Hulk anyone? When I was recently watching a Cyber webinar and heard somebody mention “Evil Proxy”, my ears pricked up. Could this be the latest villain in the Marvel Universe? Sad to say it is not, however in the real world of business it could be something much worse.
Evil Proxy is the latest phishing tool in the Cyber Crime world. It’s bad news for a couple of reasons:
- It helps criminals to bypass multi factor authentication by stealing authentication tokens
- It has been designed as a proxy Phishing-as-a-Service (PaaS) platform, which essentially means it can allow low-skill threat actors, who don’t know how to set up reverse proxies, to seal online accounts that are otherwise well-protected.
In brief, a server sits between a targeted victim and an authentication endpoint. The victim thinks they are looking at the legitimate site and the end point returns responses to the proxy server rather than the user.
There are means and ways to try to combat this new threat, however trying to detail this in an insurance blog is probably a little too complicated. The best advice would be to seek out your company’s IT guru or consultant and check what further steps you can put in place. Cyber Insurance is also another option to help provide further protection, as you never know what new threat might be coming up on the horizon. Maybe we need to be asking Kevin Feige!
Should you have any further queries or would like to discuss Cyber cover further, please don’t hesitate to contact one of the team at ProAktive.
By Peter Ryder ACII – Chartered Insurance Broker & Account Executive