Menlo Security (Country Manager Kim Seong-rae), a cloud security specialist, proposed a fundamental security solution through isolation rather than ransomware detection.

Menlo Security announced on the 13th that it is launching 'HEAT Check,' a free security assessment tool capable of evaluating exposure to 'HEAT (Highly Evasive Adaptive Threats)' attacks that bypass existing malicious URL link analysis engines.

HEAT attacks that bypass existing malicious URL link analysis engines can remain on user devices for extended periods to identify the target environment and deliver malicious content, including ransomware, to endpoint devices, potentially leading to serious security threats. In fact, errors that fail to detect ransomware can cause problems on user PCs, so a 100% fundamental security solution must be established through isolation rather than ransomware detection.

HEAT Check runs simple penetration tests to help organizations better understand vulnerabilities to HEAT attacks, providing exposure assessment analysis information and offering a 100% fundamental security solution through isolation rather than ransomware detection.

HEAT Check supports organizations in making decisions to build a robust security environment by conducting various actual HEAT attacks used by threat actors and providing results. HEAT Check does not deliver actual malicious content. It uses industry-standard EICAR (European Institute for Computer Antivirus Research) files to test whether an organization has previously been exposed to HEATs.

As remote and hybrid work environments become established, the risk of 'HEAT (Highly Evasive Adaptive Threats)' attacks is increasing as employees work using web browsers and access cloud-based applications more frequently.

In fact, according to Menlo Security's '2022 CyberEdge Cyberthreat Defense Report,' more than 70% of organizations were hit by ransomware attacks in 2021. This is a significant increase from 55% in 2018.

In addition, according to the report 'The state of threat prevention: evasive threats take center stage,' fewer than 3 out of 10 organizations are prepared to deal with increasing web-based cyber threats.

It was found that 62% of IT decision-makers experienced browser-based attacks in the past 12 months. Malware (47%) and ransomware (42%) were the security threats of greatest concern to organizations, and despite the rise in security threats, less than one-third (27%) were found to have advanced threat protection in place on all endpoint devices capable of accessing corporate applications and resources. Consequently, 46% of cybersecurity professionals identified ransomware as one of their top five business priorities.

Mark Guntrip, Director of Cybersecurity Strategy at Menlo Security, stated, “HEAT attacks utilize increasingly sophisticated techniques to evade detection by existing security tools. HEAT attacks involve all types of attacks targeting users, endpoints, or applications, either individually or in combination, as well as actual attacks such as ransomware. HEAT Check helps enterprises protect against these complex attacks.”