PhAttApp
Thuy Lam, Houssain Kettani · 2019
Technology has grown rapidly since the end of the last century. Thousands of businesses from different major industries are transforming into information organizations and offering online services. The industrial and enterprise of Internet of Things (IoT) is growing at an exponential rate. Incident Command Systems (ICS) and Supervisory Control and Data Acquisition (SCADA), which were once known to be untouchable by malware as they were usually available offline, are now facing security challenges. These systems become more vulnerable as their online availability increases to enable integration with other systems. Technology allows organizations to provide greater value to customers, expand their businesses beyond physical boundaries, and compete with other businesses. However, technology also allows attackers from all over the world to attack organizations and consumers. Ransomware, a type of malware, is a growing cybersecurity threat. It mainly targets home users and businesses for financial gain. Ransomware attacks often start with a delivery phase in which attackers deliver malicious content. Attackers often use multiple threat vectors for ransomware enablement such as emails, instant messages, and drive-by downloads, exploiting the vulnerabilities of a network or application. Among these attack vectors, email is the top threat vector, which most ransomware attackers attempt to use. This study proposes the use of a phishing detector application, PhAttApp. This application offers numerous features to detect and prevent ransomware delivery through phishing channels and thus reduces the risk of ransomware infection.