{"id":1971,"date":"2021-08-24T11:29:07","date_gmt":"2021-08-24T11:29:07","guid":{"rendered":"https:\/\/blog.kdmarc.com\/blog\/?p=1971"},"modified":"2024-08-23T12:59:29","modified_gmt":"2024-08-23T07:29:29","slug":"phishing-emails-fool-email-filters","status":"publish","type":"post","link":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/","title":{"rendered":"Phishing Messages That Even Email Filters Can&#8217;t Stop"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. This vector of <span style=\"color: #183994;\"><a style=\"color: #183994;\" href=\"https:\/\/threatcop.com\/blog\/cybercrime\/\"><strong>cybercrime<\/strong> <\/a><\/span>is aimed at obtaining users\u2019 sensitive credentials, defrauding companies of funds, stealing proprietary business data, or distributing predatory programs via rogue emails.<\/span><\/p><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_87 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #414141;color:#414141\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #414141;color:#414141\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#Public_Cloud_Becomes_a_New_Safe_Haven_for_Phishing_Pages\" >Public Cloud Becomes a New Safe Haven for Phishing Pages<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#Book_a_Free_Demo_Call_with_Our_Expert\" >Book a Free Demo Call with Our Expert<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#Harmful_ZIP_File_under_Benign_Wrapping\" >Harmful ZIP File under Benign Wrapping<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#Foreign_Language_Puts_a_Spanner_in_the_Works\" >Foreign Language Puts a Spanner in the Works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#Messages_Impersonating_Well-Known_Banks\" >Messages Impersonating Well-Known Banks<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#HTML_Code_Written_Backwards\" >HTML Code Written Backwards<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#SharePoint_Account_Takeover\" >SharePoint Account Takeover<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#Shore_up_Your_Phishing_Protection\" >Shore up Your Phishing Protection<\/a><\/li><\/ul><\/nav><\/div>\n\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">According to <span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/\" target=\"_blank\" rel=\"noopener noreferrer\"><strong><span style=\"color: #183994;\">recent findings<\/span><\/strong><\/a><\/span> by security analysts, these attacks account for almost half of all breaches in the enterprise sector. The FBI claims a phishing spin-off called business email compromise (BEC) causes eyebrow-raising losses of roughly $5 billion every year.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">With the scale of phishing scams steadily growing, numerous security vendors provide tools that prevent deceptive emails from reaching customers\u2019 inboxes. Crooks have picked up the challenge by playing a cat-and-mouse game with white hats. Their efforts are mostly focused on finding new ways to bypass email filters.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Public_Cloud_Becomes_a_New_Safe_Haven_for_Phishing_Pages\"><\/span><span style=\"color: #000000;\"><strong>Public Cloud Becomes a New Safe Haven for Phishing Pages<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">Threat actors are increasingly mishandling trusted cloud services to hide their treacherous resources and files. In one of these campaigns spotted by Check Point, phishers use Google Drive to host a decoy PDF document that supposedly includes important business data. The intended victims receive a message stating that they need to enter their Office 365 credentials to view the shared file.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">Typing the username and password actually provides access to a legitimate marketing report by a reputable consulting firm, but with the caveat that criminals retrieve the victim\u2019s Office 365 sign-in details. This information may be used to orchestrate BEC hoaxes, corporate data theft, <span style=\"color: #183994;\"><strong><a style=\"color: #183994;\" href=\"https:\/\/applehelpwriter.com\/yahoo-search-redirect-mac-virus-removal\/\" target=\"_blank\" rel=\"noopener\">and malware outbreaks<\/a>.<\/strong><\/span><\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">The campaign under scrutiny fits the context of statistics saying that Microsoft Office is the most heavily exploited entity across the spectrum of applications \u2013 it ends up in the crosshairs of cybercriminals <span style=\"color: #0000ff;\"><span style=\"color: #183994;\"><strong><u><a style=\"color: #183994;\" href=\"https:\/\/www.statista.com\/chart\/20431\/most-commonly-exploited-applications-worldwide\/\" target=\"_blank\" rel=\"noopener\">in 72.8% of cases<\/a><\/u><\/strong><\/span>.<\/span><\/span><\/p>\n\n\n\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n<title>Threatcop \u2013 Book a Free Demo<\/title>\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Outfit:wght@300;400;500;600;700&#038;display=swap\" rel=\"stylesheet\">\n<style>\n  .tc-wrap , .tc-wrap ::before, .tc-wrap ::after { box-sizing: border-box; margin: 0; padding: 0; }\n  .tc-wrap { font-family: 'Outfit', sans-serif; width: 100%; display: flex; justify-content: center; padding: 20px 10px; }\n  .tc-card { width: 100%; max-width: 820px; background: #fff; border-radius: 20px; overflow: hidden; box-shadow: 0 20px 60px rgba(24,57,148,0.13), 0 4px 16px rgba(24,57,148,0.07); display: flex; flex-direction: row; }\n  .tc-left { background: linear-gradient(160deg, #1e44b0 0%, #183994 40%, #0e2570 100%); width: 320px; flex-shrink: 0; padding: 40px 32px; display: flex; flex-direction: column; justify-content: center; position: relative; overflow: hidden; }\n  .tc-left::before { content: ''; position: absolute; inset: 0; background-image: radial-gradient(rgba(255,255,255,0.08) 1.5px, transparent 1.5px); background-size: 22px 22px; }\n  .tc-left::after { content: ''; position: absolute; bottom: -60px; right: -60px; width: 220px; height: 220px; background: radial-gradient(circle, rgba(99,179,255,0.22) 0%, transparent 65%); border-radius: 50%; pointer-events: none; }\n  .tc-panel-inner { position: relative; z-index: 1; }\n  .tc-badge { display: inline-flex !important; align-items: center !important; gap: 6px; background: rgba(255,255,255,0.1) !important; border: 1px solid rgba(255,255,255,0.18) !important; border-radius: 20px !important; padding: 4px 14px 4px 10px !important; font-size: 12.5px !important; font-weight: 600 !important; letter-spacing: .09em !important; text-transform: uppercase !important; color: rgba(255,255,255,0.85) !important; margin-bottom: 18px !important; font-family: 'Outfit', sans-serif !important; line-height: 1.4 !important; }\n  .tc-badge-dot { width: 6px; height: 6px; background: #5cd9a0; border-radius: 50%; box-shadow: 0 0 6px #5cd9a0; flex-shrink: 0; display: inline-block; }\n  .tc-left h1, .tc-left h2, .tc-left h3, .tc-left h4, .tc-left h5, .tc-left h6 { color: #ffffff !important; font-family: 'Outfit', sans-serif !important; font-size: 28px !important; font-weight: 700 !important; line-height: 1.35 !important; letter-spacing: -0.3px !important; margin: 0 !important; padding: 0 !important; background: none !important; -webkit-text-fill-color: #ffffff !important; }\n  .tc-left h2 em { font-style: normal !important; color: #7ec8ff !important; -webkit-text-fill-color: #7ec8ff !important; }\n  .tc-left p, .tc-left .tc-sub { color: rgba(255,255,255,0.78) !important; -webkit-text-fill-color: rgba(255,255,255,0.78) !important; font-family: 'Outfit', sans-serif !important; font-size: 14px !important; font-weight: 300 !important; line-height: 1.65 !important; margin-top: 12px !important; background: none !important; }\n  .tc-right { flex: 1; padding: 32px 32px 28px; display: flex; flex-direction: column; justify-content: center; }\n  .tc-form-title { font-size: 13px !important; font-weight: 600 !important; letter-spacing: .12em; text-transform: uppercase; color: #8fa4cc !important; margin-bottom: 20px !important; display: flex !important; align-items: center !important; gap: 10px; font-family: 'Outfit', sans-serif !important; }\n  .tc-form-title::after { content: ''; flex: 1; height: 1px; background: #eef1fa; }\n  .tc-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 14px; }\n  .tc-field { display: flex; flex-direction: column; gap: 5px; }\n  .tc-field.full { grid-column: 1 \/ -1; }\n  .tc-field label { font-size: 13px !important; font-weight: 600 !important; color: #3a4f7a !important; letter-spacing: .04em; text-transform: uppercase; font-family: 'Outfit', sans-serif !important; display: block !important; }\n  .tc-input-wrap { position: relative; display: flex; align-items: center; }\n  .tc-input-wrap .tc-fi { position: absolute; right: 12px; width: 15px; height: 15px; stroke: #c0ccdf; stroke-width: 1.8; pointer-events: none; fill: none; }\n  .tc-wrap input[type=\"text\"], .tc-wrap input[type=\"email\"], .tc-wrap input[type=\"number\"] { width: 100% !important; border: 1.5px solid #e2e9f7 !important; border-radius: 10px !important; padding: 9px 34px 9px 13px !important; font-family: 'Outfit', sans-serif !important; font-size: 15px !important; font-weight: 400 !important; color: #1e2d50 !important; background: #f8faff !important; outline: none !important; transition: border-color .2s, background .2s, box-shadow .2s; -moz-appearance: textfield; box-shadow: none !important; -webkit-text-fill-color: #1e2d50 !important; }\n  .tc-wrap input[type=\"number\"]::-webkit-inner-spin-button, .tc-wrap input[type=\"number\"]::-webkit-outer-spin-button { -webkit-appearance: none; }\n  .tc-wrap input::placeholder { color: #c0ccdf !important; -webkit-text-fill-color: #c0ccdf !important; opacity: 1; }\n  .tc-wrap input:focus { border-color: #183994 !important; background: #fff !important; box-shadow: 0 0 0 3.5px rgba(24,57,148,0.1) !important; }\n  .tc-phone-row { display: flex; gap: 8px; }\n  .tc-flag-select { position: relative; flex-shrink: 0; }\n  .tc-flag-select select { appearance: none !important; -webkit-appearance: none !important; border: 1.5px solid #e2e9f7 !important; border-radius: 10px !important; padding: 9px 26px 9px 12px !important; font-family: 'Outfit', sans-serif !important; font-size: 14px !important; font-weight: 500 !important; color: #1e2d50 !important; background: #f8faff !important; outline: none !important; cursor: pointer; width: 100px !important; transition: border-color .2s, box-shadow .2s; }\n  .tc-flag-select select:focus { border-color: #183994 !important; box-shadow: 0 0 0 3.5px rgba(24,57,148,0.1) !important; }\n  .tc-flag-select::after { content: ''; position: absolute; right: 10px; top: 50%; transform: translateY(-50%); width: 0; height: 0; border-left: 4px solid transparent; border-right: 4px solid transparent; border-top: 5px solid #a0b0cc; pointer-events: none; }\n  .tc-phone-row .tc-input-wrap { flex: 1; }\n  .tc-btn-submit { width: 100% !important; margin-top: 18px !important; padding: 11px !important; background: #183994 !important; border: none !important; border-radius: 10px !important; color: #fff !important; -webkit-text-fill-color: #fff !important; font-family: 'Outfit', sans-serif !important; font-size: 15px !important; font-weight: 600 !important; letter-spacing: .05em; cursor: pointer; display: flex !important; align-items: center !important; justify-content: center !important; gap: 9px; transition: background .2s, transform .15s, box-shadow .2s; box-shadow: 0 6px 24px rgba(24,57,148,0.28) !important; text-decoration: none !important; }\n  .tc-btn-submit:hover { background: #1d46b5 !important; transform: translateY(-1px); box-shadow: 0 10px 32px rgba(24,57,148,0.35) !important; color: #fff !important; }\n  .tc-btn-submit:active { transform: translateY(0); }\n  .tc-btn-submit svg { width: 16px; height: 16px; stroke: #fff; stroke-width: 2.2; fill: none; flex-shrink: 0; }\n  .tc-trust { margin-top: 10px !important; display: flex !important; align-items: center !important; justify-content: center !important; gap: 5px; font-size: 13px !important; color: #a0b0cc !important; font-family: 'Outfit', sans-serif !important; }\n  .tc-trust svg { width: 12px; height: 12px; stroke: #a0b0cc; stroke-width: 2; fill: none; flex-shrink: 0; }\n  @media (max-width: 680px) {\n    .tc-card { flex-direction: column !important; }\n    .tc-left { width: 100% !important; padding: 28px 24px 24px !important; }\n    .tc-right { padding: 24px 20px !important; }\n    .tc-grid { grid-template-columns: 1fr !important; }\n    .tc-field.full { grid-column: 1 !important; }\n  }\n<\/style>\n\n<div class=\"tc-wrap\">\n  <div class=\"tc-card\">\n    <div class=\"tc-left\">\n      <div class=\"tc-panel-inner\">\n        <div class=\"tc-badge\">\n          <span class=\"tc-badge-dot\"><\/span>\n          People Security Management\n        <\/div>\n        <h2><span class=\"ez-toc-section\" id=\"Book_a_Free_Demo_Call_with_Our_Expert\"><\/span>Book a Free<br><em>Demo Call<\/em><br>with Our Expert<span class=\"ez-toc-section-end\"><\/span><\/h2>\n        <p class=\"tc-sub\">Discover how Threatcop protects your workforce from modern cyber threats.<\/p>\n      <\/div>\n    <\/div>\n    <div class=\"tc-right\">\n      <div class=\"tc-form-title\">Your Details<\/div>\n      <form action=\"https:\/\/threatcop.com\/thankyou-blog\" method=\"get\" target=\"_blank\">\n        <input type=\"hidden\" name=\"BlogForm\" value=\"BlogForm\">\n        <input type=\"hidden\" name=\"PageSource\" id=\"tc-page-source\" value=\"\">\n        <div class=\"tc-grid\">\n          <div class=\"tc-field\">\n            <label>Full Name<\/label>\n            <div class=\"tc-input-wrap\">\n              <input type=\"text\" name=\"FullName\" placeholder=\"Jane Smith\" required=\"\">\n              <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><circle cx=\"12\" cy=\"8\" r=\"4\"><\/circle><path d=\"M4 20c0-4 3.58-7 8-7s8 3 8 7\"><\/path><\/svg>\n            <\/div>\n          <\/div>\n          <div class=\"tc-field\">\n            <label>Company Name<\/label>\n            <div class=\"tc-input-wrap\">\n              <input type=\"text\" name=\"CompanyName\" placeholder=\"Acme Corp\" required=\"\">\n              <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><rect x=\"3\" y=\"3\" width=\"18\" height=\"18\" rx=\"2\"><\/rect><path d=\"M9 3v18M3 9h6M3 15h6\"><\/path><\/svg>\n            <\/div>\n          <\/div>\n          <div class=\"tc-field full\">\n            <label>Corporate Email<\/label>\n            <div class=\"tc-input-wrap\">\n              <input type=\"email\" name=\"email\" placeholder=\"jane@yourcompany.com\" required=\"\">\n              <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><rect x=\"2\" y=\"4\" width=\"20\" height=\"16\" rx=\"2\"><\/rect><polyline points=\"2,4 12,13 22,4\"><\/polyline><\/svg>\n            <\/div>\n          <\/div>\n          <div class=\"tc-field full\">\n            <label>Phone Number<\/label>\n            <div class=\"tc-input-wrap\">\n              <input type=\"number\" name=\"Phone\" placeholder=\"98765 43210\" required=\"\">\n              <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><path d=\"M22 16.92v3a2 2 0 01-2.18 2A19.79 19.79 0 013.09 4.18 2 2 0 015.07 2h3a2 2 0 012 1.72c.13.96.36 1.9.71 2.81a2 2 0 01-.45 2.11L9.09 9.91a16 16 0 006 6l1.27-1.27a2 2 0 012.11-.45c.91.35 1.85.58 2.81.71A2 2 0 0122 16.92z\"><\/path><\/svg>\n            <\/div>\n          <\/div>\n        <\/div>\n        <button type=\"submit\" class=\"tc-btn-submit\">\n          <svg viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><path d=\"M22 2L11 13M22 2L15 22l-4-9-9-4 20-7z\"><\/path><\/svg>\n          Book My Free Demo\n        <\/button>\n        <div class=\"tc-trust\">\n          <svg viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\"><\/rect><path d=\"M7 11V7a5 5 0 0110 0v4\"><\/path><\/svg>\n          Your data is safe &amp; never shared with third parties\n        <\/div>\n      <\/form>\n    <\/div>\n  <\/div>\n<\/div>\n<script>document.getElementById('tc-page-source').value = window.location.href;<\/script>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Harmful_ZIP_File_under_Benign_Wrapping\"><\/span><span style=\"color: #000000;\"><strong>Harmful ZIP File under Benign Wrapping<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">Another clever technique is to cloak a dangerous payload inside an unconventional archive attached to an email. Here is some theory: a regular ZIP file has one \u201cEnd of Central Directory\u201d (EOCD) value that marks the final element of its composition. To conceal an extra archive tree, malefactors use an additional obfuscated EOCD parameter.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">Secure Email Gateways (SEGs) only see and analyze the normal ZIP hierarchy while overlooking its evil counterpart. When extracted, the file quietly triggers an info-stealing Trojan on the unwitting recipient\u2019s computer.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Foreign_Language_Puts_a_Spanner_in_the_Works\"><\/span><span style=\"color: #000000;\"><strong>Foreign Language Puts a Spanner in the Works<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">One more trick is to fool email filters by inserting text in a foreign language. It can be effective because some protection tools check messages for manipulative content in English or the language corresponding to the recipient\u2019s locale. Some malicious actors tailor phishing messages in Russian and include a recommendation to use the Google Translate service. With this tactic, emails may arrive in one\u2019s inbox without being flagged as dangerous.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Messages_Impersonating_Well-Known_Banks\"><\/span><span style=\"color: #000000;\"><strong>Messages Impersonating Well-Known Banks<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">Mimicking financial institutions to hoodwink users is nothing new, but a recent phishing wave took it up a notch. Scammers have been sending emails that pretend to come from the Bank of America or Citigroup and include a link redirecting to a clone of the bank\u2019s official site, which is a credential phishing page in disguise. It seems like a garden-variety trick, but the messages easily get around filters, and here is why.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">First off, the crooks only zero in on several employees in an organization. Traditional anti-phishing tools typically identify suspicious messages that come in large quantities, and therefore a few emails might fly under the radar.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">Furthermore, the messages hail from a personal email account and don\u2019t spoof the source domain. Consequently, popular defenses such as the Sender Policy Framework (<a href=\"https:\/\/threatcop.com\/blog\/spf-authentication\/\"><span style=\"color: #183994;\"><strong>SPF<\/strong><\/span><\/a>) and Domain-based Message Authentication, Reporting and Conformance (<span style=\"color: #183994;\"><strong><a style=\"color: #183994;\" href=\"https:\/\/threatcop.com\/blog\/what-is-dmarc\/\" target=\"_blank\" rel=\"noopener noreferrer\">DMARC<\/a><\/strong><\/span>) fail to detect them. The credential phishing page uses a valid SSL certificate and its registration date is recent, so it doesn\u2019t raise any red flags either.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"HTML_Code_Written_Backwards\"><\/span><span style=\"color: #000000;\"><strong>HTML Code Written Backwards<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">A fairly complex method in some phishers\u2019 repertoire is to reverse HTML code strings and then change the text direction back to normal so that the recipient can read it. The catch is that these materials appear in a skewed shape when email filters are inspecting them, so the message can sneak inside. The use of Cascading Style Sheets (CSS) to combine Latin and Arabic text in raw HTML code further enhances the trickery because the natural directions of these scripts are opposite.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"SharePoint_Account_Takeover\"><\/span><span style=\"color: #000000;\"><strong>SharePoint Account Takeover<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">In some cases, crooks leverage previously hacked SharePoint accounts to host their credential phishing pages. Since security services trust this collaborative system from Microsoft, there is a good chance that an email with a SharePoint link in it will go unnoticed. The landing site is redesigned to display a fraudulent OneDrive for Business sign-in form. Once a user enters their password, it falls into criminals\u2019 hands.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Shore_up_Your_Phishing_Protection\"><\/span><span style=\"color: #000000;\"><strong>Shore up Your Phishing Protection<\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">There is no denying that automatic defenses with email filters at their core are incredibly effective in fending off phishing attacks. However, the tricks above demonstrate that this strategy alone is not enough. With that in mind, you should additionally nurture your <span style=\"color: #183994;\"><strong><a style=\"color: #183994;\" href=\"https:\/\/threatcop.com\/blog\/security-awareness-training-for-employees\/\" target=\"_blank\" rel=\"noopener noreferrer\">security awareness<\/a><\/strong><\/span> by sticking to the following tips:<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span style=\"color: #000000;\">Don\u2019t click links in emails no matter how enticing they seem.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">Never open attachments sent by someone you don\u2019t know.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">When you are about to enter your credentials on a login page, make sure it\u2019s HTTPS rather than HTTP.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">Even if an email appears to come from a trusted individual or organization, check it for typos and other inaccuracies.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">Steer clear of messages that specify a deadline for some action or otherwise put pressure on you.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">Be skeptical about wire transfer requests from co-workers. Verify them with the purported initiator in person before sending out the money.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">Avoid oversharing personally identifiable data (PID) on publicly available resources such as social networks.<\/span><\/li>\n\n\n\n<li><span style=\"color: #000000;\">Turn on a firewall and use reputable Internet security software that comes with an anti-phishing module.<\/span><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><span style=\"color: #000000;\">In summary, phishing attacks are fueled by a combination of human slip-ups and imperfections of mainstream protection tools. Stepping up your online hygiene is half the battle when it comes to avoiding these hoaxes, and email filters should take care of the rest.<\/span><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><div class=\"wp-block-image\">\n<figure class=\"alignright\"><img decoding=\"async\" width=\"200\" height=\"300\" src=\"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/me-5-200x300-1.jpeg\" alt=\"David Balaban\" class=\"wp-image-10624\"\/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\"><strong><span style=\"color: #808080;\">David Balaban is a computer security researcher with over 17 years of&nbsp;experience in malware analysis and antivirus software evaluation. David runs MacSecurity.net and Privacy-PC.com projects that present expert opinions on&nbsp;contemporary information security matters, including social engineering,&nbsp;malware, penetration testing, threat intelligence, online privacy, and white hat&nbsp;hacking. David has a strong malware troubleshooting background, with a recent&nbsp;focus on ransomware countermeasures.<\/span><\/strong><\/p>\n\n\n\n<p class=\"has-text-align-right wp-block-paragraph\"><strong><span style=\"color: #808080;\"><span style=\"color: #000000;\">Written By:<\/span> <span style=\"color: #183994;\"><a style=\"color: #183994;\" href=\"https:\/\/twitter.com\/DavidBalaban1\" target=\"_blank\" rel=\"noopener\">David Balaban<\/a><\/span><br><\/span><\/strong><\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. This vector of cybercrime is aimed at obtaining users\u2019 sensitive credentials, defrauding companies of funds, stealing proprietary business data, or distributing predatory programs via rogue emails. According to recent findings by security analysts, these attacks [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":6984,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45,43],"tags":[],"class_list":["post-1971","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-email-security","category-social-engineering"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Email Filters Are Helpless On These Phishing Messages<\/title>\n<meta name=\"description\" content=\"When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. Even the best email filters...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Email Filters Are Helpless On These Phishing Messages\" \/>\n<meta property=\"og:description\" content=\"When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. Even the best email filters...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/\" \/>\n<meta property=\"og:site_name\" content=\"Threatcop\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/Threatcop\/100083109892339\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-24T11:29:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-23T07:29:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/Email-Filters-are-Helpless.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1250\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Dip Jung Thapa\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatcop\" \/>\n<meta name=\"twitter:site\" content=\"@threatcop\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dip Jung Thapa\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/\"},\"author\":{\"name\":\"Dip Jung Thapa\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/person\\\/75585994ee4cb3e8b24fe7375dc85ee8\"},\"headline\":\"Phishing Messages That Even Email Filters Can&#8217;t Stop\",\"datePublished\":\"2021-08-24T11:29:07+00:00\",\"dateModified\":\"2024-08-23T07:29:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/\"},\"wordCount\":1097,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Email-Filters-are-Helpless.webp\",\"articleSection\":[\"Email Security\",\"Social Engineering\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/\",\"name\":\"Email Filters Are Helpless On These Phishing Messages\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Email-Filters-are-Helpless.webp\",\"datePublished\":\"2021-08-24T11:29:07+00:00\",\"dateModified\":\"2024-08-23T07:29:29+00:00\",\"description\":\"When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. Even the best email filters...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#primaryimage\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Email-Filters-are-Helpless.webp\",\"contentUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Email-Filters-are-Helpless.webp\",\"width\":1250,\"height\":1200,\"caption\":\"Phishing Emails Passing Through Email Filters\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/phishing-emails-fool-email-filters\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phishing Messages That Even Email Filters Can&#8217;t Stop\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/\",\"name\":\"Threatcop\",\"description\":\"Cybersecurity Blogs, News, Updates, and Articles\",\"publisher\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#organization\",\"name\":\"Threatcop\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/threatcop-logo-black-1.png\",\"contentUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/threatcop-logo-black-1.png\",\"width\":432,\"height\":102,\"caption\":\"Threatcop\"},\"image\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/Threatcop\\\/100083109892339\\\/\",\"https:\\\/\\\/x.com\\\/threatcop\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/threatcop\\\/\",\"https:\\\/\\\/www.instagram.com\\\/threatcop_official\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/person\\\/75585994ee4cb3e8b24fe7375dc85ee8\",\"name\":\"Dip Jung Thapa\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/avatar_user_5_1698662450.jpeg\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/avatar_user_5_1698662450.jpeg\",\"contentUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/avatar_user_5_1698662450.jpeg\",\"caption\":\"Dip Jung Thapa\"},\"description\":\"Co-Founder &amp; COO at Threatcop\u00a0 Department: Operations and Marketing Dip Jung Thapa, Chief Operating Officer (COO) of Threatcop, a leading cybersecurity company dedicated to enhancing people security management for businesses. With a profound understanding of cybersecurity issues, Dip plays a pivotal role in driving Threatcop's mission to safeguard people's digital lives.\u00a0\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Email Filters Are Helpless On These Phishing Messages","description":"When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. Even the best email filters...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/","og_locale":"en_US","og_type":"article","og_title":"Email Filters Are Helpless On These Phishing Messages","og_description":"When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. Even the best email filters...","og_url":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/","og_site_name":"Threatcop","article_publisher":"https:\/\/www.facebook.com\/people\/Threatcop\/100083109892339\/","article_published_time":"2021-08-24T11:29:07+00:00","article_modified_time":"2024-08-23T07:29:29+00:00","og_image":[{"width":1250,"height":1200,"url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/Email-Filters-are-Helpless.webp","type":"image\/webp"}],"author":"Dip Jung Thapa","twitter_card":"summary_large_image","twitter_creator":"@threatcop","twitter_site":"@threatcop","twitter_misc":{"Written by":"Dip Jung Thapa","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#article","isPartOf":{"@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/"},"author":{"name":"Dip Jung Thapa","@id":"https:\/\/threatcop.com\/blog\/#\/schema\/person\/75585994ee4cb3e8b24fe7375dc85ee8"},"headline":"Phishing Messages That Even Email Filters Can&#8217;t Stop","datePublished":"2021-08-24T11:29:07+00:00","dateModified":"2024-08-23T07:29:29+00:00","mainEntityOfPage":{"@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/"},"wordCount":1097,"commentCount":0,"publisher":{"@id":"https:\/\/threatcop.com\/blog\/#organization"},"image":{"@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#primaryimage"},"thumbnailUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/Email-Filters-are-Helpless.webp","articleSection":["Email Security","Social Engineering"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/","url":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/","name":"Email Filters Are Helpless On These Phishing Messages","isPartOf":{"@id":"https:\/\/threatcop.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#primaryimage"},"image":{"@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#primaryimage"},"thumbnailUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/Email-Filters-are-Helpless.webp","datePublished":"2021-08-24T11:29:07+00:00","dateModified":"2024-08-23T07:29:29+00:00","description":"When it comes to the prevalence and financial footprint, phishing is one of the top threats to individuals and organizations. Even the best email filters...","breadcrumb":{"@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#primaryimage","url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/Email-Filters-are-Helpless.webp","contentUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2021\/08\/Email-Filters-are-Helpless.webp","width":1250,"height":1200,"caption":"Phishing Emails Passing Through Email Filters"},{"@type":"BreadcrumbList","@id":"https:\/\/threatcop.com\/blog\/phishing-emails-fool-email-filters\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/threatcop.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Phishing Messages That Even Email Filters Can&#8217;t Stop"}]},{"@type":"WebSite","@id":"https:\/\/threatcop.com\/blog\/#website","url":"https:\/\/threatcop.com\/blog\/","name":"Threatcop","description":"Cybersecurity Blogs, News, Updates, and Articles","publisher":{"@id":"https:\/\/threatcop.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/threatcop.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/threatcop.com\/blog\/#organization","name":"Threatcop","url":"https:\/\/threatcop.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/threatcop.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/08\/threatcop-logo-black-1.png","contentUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/08\/threatcop-logo-black-1.png","width":432,"height":102,"caption":"Threatcop"},"image":{"@id":"https:\/\/threatcop.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/people\/Threatcop\/100083109892339\/","https:\/\/x.com\/threatcop","https:\/\/www.linkedin.com\/company\/threatcop\/","https:\/\/www.instagram.com\/threatcop_official\/"]},{"@type":"Person","@id":"https:\/\/threatcop.com\/blog\/#\/schema\/person\/75585994ee4cb3e8b24fe7375dc85ee8","name":"Dip Jung Thapa","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2023\/10\/avatar_user_5_1698662450.jpeg","url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2023\/10\/avatar_user_5_1698662450.jpeg","contentUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2023\/10\/avatar_user_5_1698662450.jpeg","caption":"Dip Jung Thapa"},"description":"Co-Founder &amp; COO at Threatcop\u00a0 Department: Operations and Marketing Dip Jung Thapa, Chief Operating Officer (COO) of Threatcop, a leading cybersecurity company dedicated to enhancing people security management for businesses. With a profound understanding of cybersecurity issues, Dip plays a pivotal role in driving Threatcop's mission to safeguard people's digital lives.\u00a0"}]}},"_links":{"self":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts\/1971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/comments?post=1971"}],"version-history":[{"count":9,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts\/1971\/revisions"}],"predecessor-version":[{"id":11859,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts\/1971\/revisions\/11859"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/media\/6984"}],"wp:attachment":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/media?parent=1971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/categories?post=1971"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/tags?post=1971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}