HackAlert V3
Log In
Learn More
Register
Contact Us
Armorize.com
日本語日本語
 

Learn More about HackAlert V3

Sign Up for a free trial
HackAlert V3 Overview
HackAlert V3 is a cloud-based service that provides real-time identification and alarms for drive-by downloads and zero-day malware threats hidden in websites and online advertisements.
HackAlert V3 identifies malicious websites before search engines such as Google blacklist them and thus protects business reputation and revenues.
The Drive-by Download Threat
Drive-by downloading is a hacker technique designed to steal information from Internet users by forcing them to automatically download malicious software without their knowledge or consent.
Drive-by download attacks are entirely silent. They require no user interaction such as clicking on a specific link. It is enough to simply visit a vulnerable web page that has been injected with malicious iframes or Javascript that exploit end-user PC vulnerabilities to force automatic download and execution of malicious software (malware). Website owners have no idea that this attack has occurred and that their website is compromising their customers' security.
Online advertising mechanisms present an ideal avenue for targeted malware drive-by downloads based on geographic location, browser or PC type and time of day. This phenomenon is referred to as "malvertising".
The drive-by downloading process is as follows:
A hacker injects malicious code or scripts into a vulnerable website
When Internet users browse the website, the injected code exploits vulnerabilities in their web browser or in plug-ins such as flash or adobe. The hacker takes control of the exploited browser and directs it to a 3rd party site to download malware.
In general the malware has the following features:
Downloads silently without the Internet user's consent or knowledge
Evades detection by commercial desktop antivirus solutions
Downloaded malware silently executes and runs malicious programs to control end-user PCs and to steal personal information.
The Drive-by Downloading Impact
Drive-by downloading impacts both enterprise websites and the end-users who browse them as follows:
Theft of personal information including online banking information, credit card details and stored passwords leading to email hijacking, fraudulent access to social network sites and, in many cases, identity theft.
Damage to business reputation when the corporate website is identified as infecting the computers of the very people it is supposed to server. This leads to lost sales opportunities, non-compliance issues and potential legal consequences if customer's confidentiality or privacy has been impacted.
Google flagging and blacklisting resulting in users browsing the site receiving a warning that their PC and personal information is at risk. Enterprise websites flagged as malicious in this manner experience a sharp fall of traffic and ultimately in revenue.
How does HackAlert V3 help fight drive-by downloads and malvertising
HackAlert V3 is delivered as a cloud-based service. The service's globally distributed agents browse customer websites to detect active malware downloads and links to malicious sites.
HackAlert V3 optimizes multiple analysis techniques to detect malware drive-by downloads targeting end-users before the website is flagged by search engines as malicious.
HackAlert V3 delivers the following benefits:
Protects clients and customers from malware injected websites, drive by downloads and malicious advertising (malvertising)
Identifies malware before the website is flagged as malicious
Displays injected code snippets to facilitate remediation
Deploys as cloud-based SaaS or as a flexible API for enterprise integration
Integrates with WAF or Web server modules for instant mitigation
Sign Up for a free trial

Click Image to Enlarge

Click Image to Enlarge

Click Image to Enlarge

Click Image to Enlarge

Click Image to Enlarge