Resources
Blog

Don’t Let Your Customers Be Fooled By Cousin Domains

Tue, 12/15/2015
In the last five years, we’ve all become far too familiar with it – hackers spoofing a company’s domain and therefore tarnishing the brand, bad actors attempting to infect our computers with malware, and criminals sending millions of spam messages. As if this isn’t enough, now there is a whole group of people working to outsmart companies AND their customers by using cousin domains to fool...
DMARC Email Authentication
SPF
DKIM
Content Inspection
Blog

New Email-Embedded Malware Getting Through Major AV Scans

Mon, 12/14/2015
Clearswift has recently been approached by a number of top cybersecurity teams and organizations to help them address an increasing threat of ongoing attempts to deliver embedded malware hidden in email attachments that is automatically activated by malicious scripting code. The sophistication and continuous morphing of delivery methods have made it so these new malware variants go undetected and pass right by major AV scanning solutions.
Email Security
Blog

Email Scams to Avoid this Holiday Season

By John Wilson on Thu, 12/10/2015
With the high volume of email activity the holiday season brings, we’ve been getting a lot of questions about holiday email scams – what to look for and how to avoid them. So in the spirit of giving…some good advice…our Field CTO John Wilson has published a blog on LinkedIn with suggestions that can help people better protect themselves from online criminals, and help businesses ensure they aren’t...
Cloud Security
Blog

What Is Adaptive Data Loss Prevention?

Thu, 12/03/2015
There’s a bewildering volume of data in modern business. IDC has predicted that by 2025, there will be 175 zettabytes of data in the world, a figure that's almost impossible to conceive. While this data will not be of interest to many people, there will be some that is highly prized indeed.Data has become highly valuable IP for many organizations, and the need to keep it protected from cyber...
Email Data Loss Prevention
Email Security
Data Security
Blog

Ansible and Terraform at Agari: An Automation Journey

Mon, 11/30/2015
Snowflakes and Early Automation EffortsAt Agari, as part of our mission to solve phishing, we deal with data at scale. We’ve chosen AWS to help us move quickly, making sure our infrastructure is as agile as we are.Unfortunately, in the beginning, we treated AWS instances much the same way as physical servers: each configuration was lovingly hand-crafted, packages were installed at the command line...
Blog

Steve Katz, FS-ISAC Chairman: Perspectives on Phishing

Tue, 11/24/2015
Steve Katz - “Phishing and social engineering is still a global threat to every business around today.”Last year, phishing attacks cost organizations $4.5 billion in losses, but as we all know the loss is not only monetary. These attacks exploit the trust we as customers have in the brands we use.Recently Agari sat down with the Financial Services industry's first CISO, previous CSO of Citi Group...
Blog

Exploring Phishing Statistics

Tue, 11/10/2015
At Agari, we are vocal about the steps organizations can take to protect their brands and customers from the impact of phishing attacks. But what exactly are the hard numbers behind our mission? Let’s look at some phishing statistics showing a clear need for change when it comes to mitigating the phishing problem. A rising threat Verizon research has found that phishing is now the second most...
Blog

Protecting Customers From Phishing At FS-ISAC

Wed, 11/04/2015
A long-time sponsor of FS-ISAC, Agari takes pride in being a member of the digital security community, committed to protecting financial services brands and their customers from email-based cyber attacks. During this year's conference, held at the Hotel del Coronado in San Diego, we once again joined our industry brethren, reconnected with familiar faces and forged new relationships with cyber...
Blog

Phishing Awareness: How to Prevent Phishing

Mon, 10/26/2015
[et_pb_section admin_label="section"][et_pb_row admin_label="row"][et_pb_column type="4_4"][et_pb_text admin_label="Text" background_layout="light" text_orientation="left" use_border_color="off" border_color="#ffffff" border_style="solid"] In the final installment in our series of blogs on the Fundamentals of Phishing we will explore how to prevent phishing attacks. To truly prevent email...
Blog

Email Phishing Examples and How to Spot Them

Tue, 10/13/2015
In the second in our series of blogs on the Fundamentals of Phishing we will explore how to identify fraudulent emails. Not that long ago, phishing attempts were quite primitive and often full of errors, and it was easier for consumers to identify when something was amiss. In addition, consumers weren’t accessing their inboxes from multiple devices and mobiles, nor did they expect to receive...
Anti-Phishing Offerings
Anti-Phishing
Blog

Exploring the Ashley Madison Dataset

Fri, 10/02/2015
I first heard about the Ashley Madison breach on July 15, 2015 in a post by Brian Krebs. I immediately wondered what the fallout of such a breach would be. Would Ashley Madison's new tagline be "1 million divorces and counting!" Would the perpetrators try to profit from the stolen data, perhaps through blackmail? I never imagined I'd soon have the chance to explore the dataset myself, after Forbes...
Blog

Agari and RiskIQ Join Forces to Share Threat Data to Fight Cyber Criminals

Tue, 09/15/2015
Threat intelligence exchange will benefit Agari and RiskIQ customers through heightened security awareness and the ability to respond to discovered threatsSAN MATEO, Calif. — Sept. 15, 2015 — Agari, the leading provider of data-driven security solutions that detect and prevent advanced email cyberthreats, and RiskIQ, the Enterprise Digital Footprint Security company, today announced a strategic...
Blog

Airflow DAG @ Agari

Mon, 08/31/2015
Workflow Schedulers Workflow schedulers are systems that are responsibile for the periodic execution of workflows in a reliable and scalable manner. Workflow schedulers are pervasive - for instance, any company that has a data warehouse, a specialized database typically used for reporting, uses a workflow scheduler to coordinate nightly data loads into the data warehouse. Of more interest to...
Blog

What is 'Zero-Trust'?

Tue, 08/25/2015
With the X-Files soon making a return to the small screen (!!!), I have been thinking a lot lately about the concept of trust. Specifically as it relates to security, and especially the concept of "Zero-Trust". Many security front-runners have begun enacting a new security architecture called Zero-Trust Networking and it really took off when Google decided to implement it. The underlying...
Blog

Automated Model Building with EMR, Spark, and Airflow

Mon, 07/20/2015
Data science applications provide much of the power behind Agari’s e-mail security products. The e-mail landscape is vast and dynamic, and we require the ability to regularly analyze incoming data. Models including forwarder classification, malicious campaign identification, domain reputation, and inbound sender modeling are created on hourly to daily cadences. We therefore need a fast and cost...
Blog

Data Science at Agari: Forwarder Classification

Mon, 07/20/2015
MotivationAmong the challenges that our engineering team faces is the ability to classify an email-sending entity as a forwarder. At Agari, we are primarily interested in the authentication of emails from originating senders. Forwarders are defined as entities which forward messages from originating senders as well as from other forwarders. Examples include servers in educational institutions,...
Blog

Scaling Postfix on AWS with Elastic Load Balancing

Wed, 06/24/2015
Agari's mission to solve email phishing often presents unique technical challenges. Our data ingestion process involves coping with large-scale inbound SMTP traffic. We've chosen Postfix as our MTA of choice. The traditional way to scale SMTP is simply to maintain MX records for multiple ingestion paths. This works but can be very limiting. Agari's Amazon Web Services-hosted infrastructure...
Blog

Agari Recognized by OTA for Commitment to Online Trust and Security

Mon, 06/15/2015
Fourth consecutive year that Agari is honored for its leadership in brand protection, privacy and securitySAN MATEO, Calif. – June 16, 2015 – Agari, the leading provider of data-driven security solutions that detect and prevent advanced email cyber threats, today announced it has been chosen for the Online Trust Alliance (OTA) 2015 Online Trust Honor Roll for the fourth year in a row. Each year,...
Blog

Why Email Marketers Need to Know About DMARC and Email Security

Thu, 06/11/2015
By Brad van der Woerd, Director, Market Intelligence & Deliverability at Yesmail Read original post here.Early last year, we published a blog post informing marketers about the occurrences of cyber crime within the email security landscape via methods such as email phishing and domain spoofing. We also shared details about a form of email technology called Domain-based Message Authentication,...
Blog

Leveraging AWS to Build a Scalable Data Pipeline

Sat, 06/06/2015
Data-rich companies (e.g. LinkedIn, Facebook, Google, and Twitter) have historically built custom data pipelines over bare metal in custom-designed data centers. In order to meet strict requirements on data security, fault-tolerance, cost control, job scalability, and uptime, they need to closely manage their core technology. Like serving systems (e.g. web application servers and OLTP databases)...