#HTML #SBI #LG

HTML smuggling

HTML smuggling is a technique for bypassing perimeter security devices by generating malicious HTML behind the firewall – within the browser on the target endpoint. HTML Smuggling techniques sidestep traditional network security solutions such as email scanners, proxies and sandboxes by using the features of HTML5 and Javascript. This is done by generating the malicious HTML code within the browser on the target device which is already inside the security perimeter of the network. HTML smuggling works by exploiting the basic features of HTML5 and JavaScript that are present in web browsers. Cybercriminals have taken advantage of remote-based employees who spend much of their time accessing cloud-based work applications to distribute malware via a technique known as HTML smuggling.



We have seen a sharp increase in HTML smuggling. Researchers have reported witnessing an increase in use of the malware distribution technique known as HTML smuggling, as cybercriminals take advantage of the wealth of remote-based employees who spend much of their time accessing cloud-based work applications and performing tasks via a web browser. This technique allows the malware to avoid network security solutions such as sandboxes, legacy proxies, and firewalls, according to Menlo Security, whose researchers discovered a new HTML smuggling campaign called ISOMorph. From an attacker perspective, the browser is an ideal environment to stage an attack because of its rampant usage by remote employees, especially since the COVID-19 pandemic began. A researcher said, HTML smuggling technique is a “blind spot” for many cyber defenders, because many endpoint protection solutions lack browser instrumentation and visibility.

Today's Headline in NewsHours
0:00 Intro
2:08 Consumer Commission Directs #SBI To Refund Rs 18.36 Lakh To Elderly Couple
2:55 #LG Electronics to invest 3.3 Trillion Won to produc.