What is HEAT (detection evasive threat)?

Typical HEAT Threat: Adversary-in-the-Middle (AiTM)

A typical example of a HEAT attack is an attack that breaks through multi-factor authentication called Adversary-in-the-Middle (AiTM), which is one of the phishing attack methods. AiTM bypasses multi-factor authentication by allowing an attacker to install a proxy server between the user and the website the user wants to visit, and steal authenticated session information. By entering their IDs and passwords without realizing that the phishing site is a legitimate site, there is a risk that their authentication information will be stolen and misused.

An example of a phishing attack technique: Adversary-in-the-Middle (AiTM)

• The main target of the theft is not the secret information but the session cookie (certificate of authentication)
  • A phishing site acts as a reverse proxy between the user and the legitimate website

What is HEAT Shield?

• When a user accesses the web, it reproduces and analyzes the website content in real time, and determines whether it is a threat in real time.
• If the site is determined to be a malicious phishing site, it will prevent the leakage of authentication information by automatically implementing policy controls such as prohibiting writing and access to the site.

*More functions will be added in the future.

Anti-phishing attack with HEAT shield

Addressing HEAT with Menlo Security

The new function "HEAT Shield" prevents users from entering their authentication information to phishing sites, and by combining it with Isolation technology, it also prevents intrusion from other advanced external threats that avoid detection.

Addressing HEAT with Menlo Security