Use case
Today, hyper-personalised lures delivered over WhatsApp, Signal, Telegram, Teams and Slack are successfully stealing credentials and bypassing MFA. AI has made every employee a high-value target and every channel a potential attack vector.
When attackers can generate convincing, hyper-personalized phishing lures at scale and deliver them across every channel, leaving mobile devices unprotected is simply no longer a risk any organisation can afford to take.
A text message, a WhatsApp chat, a LinkedIn post, a Slack update – these are where today's precisely targeted attacks originate.
Today, hyper-personalised lures delivered over WhatsApp, Signal, Telegram, Teams and Slack are successfully stealing credentials and bypassing MFA. AI has made every employee a high-value target and every channel a potential attack vector.
Corrata protects against phishing by blocking suspicious links detected by our specialised mobile phishing threat intelligence. This includes threats from SMS phishing, WhatsApp messages, QR codes, LinkedIn posts and more.
Corrata delivers protection which is 3X more effective than the competition. In addition to blocking domains based on DNS filtering, Corrata also implements a range of enhanced protections, listed below, which go beyond our competitors.
A new phishing domain appears every 60 seconds – Corrata responds in real-time.
Corrata uses a range of techniques to assess the threat level associated with previously unseen domains. Domains which are assessed as risky are quarantined until their reputations can be established.
Cybercriminals use toolkits sourced on the dark web – Corrata stops these in their tracks.
90% of phishing attacks are delivered using toolkits. By blocking access to the servers hosting the phishing infrastructure Corrata renders these toolkits ineffective.
Website builder platforms are used extensively to host phishing domains.
Cybercriminals often avoid detection by using legitimate web platforms to host their phishing sites. A number of website builder platforms are known to host a large number of phishing sites.
Corrata gives customers the ability to block access to any content hosted on the most abused platforms.
Using SNI Corrata never goes dark even when DNS traffic is encrypted.
Privacy concerns are leading more and more end users to ‘hide’ their DNS requests using DNS over HTTPS (DoH) or DNS over TLS (DoT). To address this Corrata has developed a unique capability to establish server domains using the Server Name Indication (SNI) protocol.
Corrata enhances standard industry phishing block lists with specialist mobile threat intelligence.
Traditional phishing threat intelligence focuses on email. As a result many mobile security solutions lack reliable, timely intelligence on mobile attacks. Corrata augments traditional threat intelligence with threat research focused on smishing and other mobile specific threats.
whitepaper
85% of phishing attacks on mobile take place outside email on channels such as SMS, WhatsApp and Facebook Messenger. To learn how to combat this threat download our updated guide.
85% of phishing on mobile takes place outside email therefore bypassing your email security protections. And employees are notably less vigilant when using mobile due to its convenience and informality. They click on links in SMS messages and scan physical and digital QR codes opening up your organization to risk
Unfortunately the built in consumer grade protections against unsafe content found on mobile devices are completely ineffective against the pace at which new phishing domains are generated. They are particularly useless against the kind of targeted attacks used against organizations.
Corrata doesn’t just rely on industry threat intelligence. As a mobile security specialist we generate our own proprietary intelligence and combine it with machine learning assisted techniques to spot malicious attacks, including mfa bypass attempts, before the competition.
Smishing is phishing delivered by SMS text message. Attackers send messages impersonating banks, delivery firms or colleagues, containing links to fake sites that harvest credentials or session cookies. Modern smishing increasingly extends to WhatsApp, Signal and other messaging apps.
Corrata inspects network traffic on the device and blocks connections to malicious sites regardless of the channel the link arrived on: SMS, WhatsApp, QR code, social media or collaboration tools. Detection combines DNS filtering, SNI-based inspection of encrypted traffic, real-time zero-day domain assessment and proprietary mobile threat intelligence.
Yes. Adversary-in-the-middle phishing kits proxy the real login page, capturing credentials and session cookies so attackers can bypass MFA. Because 90% of phishing attacks use these toolkits, Corrata blocks the IP ranges hosting their infrastructure, stopping the attack before the login page loads.
Most enterprise data now travels over insecure networks. Corrata keeps employee communications private on unsafe cellular and Wi-Fi…
Risky apps over-reach on permissions, carry known vulnerabilities or come from unofficial stores. Corrata flags them and prompts…
Phones can access the same corporate data as laptops. Corrata ensures only devices known to be secure can…
A short call, a live look at the product, and a straight answer on whether it fits your estate.