News of the Cyber World

[kyonides]

Email Appender Implant

https://www.cyberscoop.com/email-appende...-advisory/
Hackers now might rely on a new tool to get into your email account and spread malware. It's called the Email Appender and it's available on the dark web.

How does it work?

First, attackers must obtain valid email addresses and associated passwords, often available on the dark web at a low cost. Then the attacker has to upload the compromised credentials into Email Appender, which checks the credentials and connects to the accounts through the Internet Message Access Protocol, a standard protocol email clients use to retrieve messages. From there, attackers can use an IMAP feature that allows an authenticated user to append a message to their inboxes, and can amend the “Sender,” “From” and “Reply-To” fields.

The experts' recommendation

The best way to render Email Appender impotent is to enable multi-factor authentication. Once an account is protected with more than just a password, the malicious software can’t do its job.