Barracuda Account Takeover Protection
Prevent, detect, and remediate account takeover.
1 in 7 organizations experience an account takeover.
Hackers use compromised accounts to move laterally within your organization and attack your customers and business partners.
Detect and remediate account takeover using AI.
Protect your business and employees from account takeover attempts and attacks launched from compromised accounts.
Prevent lateral phishing and attacks on your business partners.
Identify behavioral, content, and link-forwarding anomalies within your organization to flag and quarantine fraudulent emails sent from compromised accounts.
Lock attackers out of compromised mailboxes.
Get access to remediation tools to quickly block attackers’ access to compromised accounts and restore access for legitimate users.
Protect against internal and external attacks.
Corporate account takeover presents a significant new threat to businesses. Hackers gain access to corporate email accounts through stolen credentials and use them to launch subsequent targeted attacks, internally and against external targets. Account takeover or attacks that originate from these accounts are almost impossible to detect since they don’t leverage impersonation techniques — they come from a legitimate account and appear to be from a trusted source. In fact, traditional email security solutions don’t even observe internal traffic and have no way of stopping an attack originating internally.
Prevent
Prevent loss of credentials by blocking targeted phishing attacks missed by email gateways.
Detect
Detect and alert IT when an account is compromised.
Remediate
Remove all malicious email sent by a compromised account.
Prevent loss of credentials and account takeover.
Barracuda detects both account takeover attempts and attacks launched from compromised accounts. By analyzing both historical and inbound data, the AI identifies behavioral, content, and link-forwarding anomalies within your organization to flag and quarantine fraudulent emails. It’s also able to prevent attempts to compromise employee credentials, by automatically blocking targeted phishing emails that try to harvest employee passwords.
Detect account takeover in progress and alert IT.
Once an email account is compromised and hackers are inside the organization, they can start moving laterally, looking to compromise more valuable accounts. Attackers monitor and track activity to learn how your company does business and use this information to launch attacks against your partners and customers. With Barracuda, your IT team will be alerted of suspicious behavior in your users’ email accounts, including unusual log-ins, changes in inbox rules, and malicious emails sent from internal accounts.
Remediate account takeover and remove malicious email messages.
Account takeover can be devastating for organizations and must be remediated quickly once identified. IT admins need to ensure attackers are blocked from access to compromised accounts, any malicious messages are identified, and recipients are alerted. With Barracuda’s account takeover remediation tool, admins can delete all email attacks sent internally from compromised accounts and issue alerts to any external recipients. IT teams are able to quickly lock out hackers from compromised accounts to ensure that they are no longer used with malicious intent.
Features:
Detect and prevent account takeover
Detect suspicious logins by tracking IPs that exhibit suspicious behavior, such as failed sign-ins, and share intelligence across all users and accounts. Track each user’s access patterns and alert IT administrators when Barracuda observes unusual sign-in activity such as from an unusual device or geography. The AI tracks user-level patterns and organization-wide patterns.
By detecting anomalies in internal employee communications, Barracuda can automatically detect when employee accounts become compromised and send malicious emails to internal and external recipients. Administrators get alerted when an account has been compromised, and they can take immediate action.
Barracuda automatically quarantines phishing emails that allow attackers to steal employee credentials and can lead to account takeovers.
Barracuda can automatically identify which malicious emails were sent from a compromised account and flag them for administrators.
Changes to a user’s email inbox rules can potentially indicate an account takeover. Barracuda lets IT administrators review and investigate recent changes to inbox rules. The Inbox Rules Change Feed provides visibility across the entire email environment and lets you investigate rules changes for a specific email or account.
Remediate account takeover
Barracuda's account takeover remediation tool allows administrators to delete all phishing emails sent from compromised accounts from employee mailboxes.
Barracuda allows administrators to identify which external recipients received emails from compromised accounts and notify them of the attack.
Barracuda helps administrators lock out attackers from compromised accounts, preventing them from using the compromised account to launch phishing campaigns and forward emails externally.
Flexible API-based deployment
Barracuda account takeover protection uses Office 365 APIs to connect directly to your environment. The APIs allow the AI to both learn customer historical communication patterns, as well as detect and quarantine emails in real time. It’s a cloud-based SaaS solution that requires no maintenance or installation.
You can set up Barracuda’s account takeover protection in one minute by simply signing up and connecting it to your Office 365 tenant. No need to change your MX records or install any software.
The API architecture allows impersonation protection to work alongside any existing gateway-based email security solution as a last layer of defense for targeted attacks.
Plans:
Barracuda offers 3 ways to protect your email, data, users, and acess
Comprehensive Microsoft 365 Protection Starts Here.
Account Takeover Protection is included in Barracuda Email Protection.
Protect users from all email threat types with secure email gateway combined with artificial intelligence.
Includes everything from Advanced.
Add automated post-delivery email incident response to your email security to save resources and secure your users mailboxes.
Includes everything from Premium.
Get comprehensive protection for Microsoft 365 by improving your resiliency with user training, data protection, email archiving, and zero trust access.
| Capabilities | Advanced | Premium | Premium Plus |
|---|---|---|---|
| PREVENT THREATS | |||
| Spam and Malware Protection Identify and block spam, viruses, and malware delivered via email messages. Using virus scanning, spam scoring, real-time intent analysis, URL link protection, reputation checks, and other techniques, Barracuda scans email messages and files. |
|||
| Attachment Protection Barracuda combines behavioral, heuristic, and sandboxing technologies to protect against zero-hour and targeted attacks. A sandbox environment is used to detonate and observe behavior of suspicious attachments. |
|||
| Link Protection Link Protection automatically rewrites URLs so that Barracuda can sandbox the request at click time to block malicious links. |
|||
| Email Continuity In the event of a mail server outage or loss of connectivity, an emergency mailbox lets users continue to send and receive emails, staying productive until your primary servers are back online. |
|||
| Phishing and Impersonation Protection Automatically detect and prevent impersonation, business email compromise, and other targeted attacks. Barracuda’s AI engine learns each organization's unique communication patterns and leverages these patterns to identify anomalies and prevent socially engineered attacks in real time. |
|||
| Account Takeover Protection Stop phishing attacks used to harvest credentials for account takeover. AI detects anomalous email behavior and alerts IT, then finds and removes all fraud emails sent from compromised accounts. |
|||
| Domain Fraud Protection Prevent email domain fraud with DMARC reporting and analysis. Barracuda provides granular visibility and analysis of DMARC reports and helps you minimize false positives, protect legitimate email, and prevent spoofing. |
|||
| Web Security Protect users from accessing malicious web content with advanced DNS and URL filtering. |
|||
| Zero Trust Access for Microsoft 365 Mitigate breach risks for remote employees and contractors and reduce your exposure to lateral attacks on Microsoft 365 applications by deploying continuous verification of user and device identity and trust. |
|||
| DETECT AND RESPOND | |||
| Automatic Remediation All user-reported messages are automatically scanned for malicious URLs or attachments. When a threat is detected, all matching emails are automatically moved from users' mailboxes into their junk folders. |
|||
| SIEM/SOAR/XDR Integration Orchestrate incident response cross-product with RESTful API (beta) and syslog integrations. Remotely administer and configure incident response capabilities and store your event data for tracking, analysis, and troubleshooting. |
|||
| Threat Hunting and Response Quickly identify and efficiently remediate post-delivery threats by automating investigative workflows and enabling direct removal of malicious emails. |
|||
| Automated Workflows Build custom playbooks to completely automate your incident response process. Admins at any technical level can create a workflow by defining a trigger, determining conditions, and assigning the desired actions through a simple user interface. |
|||
| Attack Simulation Simulated phishing attacks are constantly updated to reflect the most recent and most common threats. Simulations are not limited to email, but also include voice, SMS, and portable-media (USB stick) attacks. |
|||
| Security Awareness Training Get access to advanced, automated education technology that includes simulation-based training, continuous testing, powerful reporting for administrators, and active incident-response awareness. |
|||
| SECURE DATA, ENSURE COMPLIANCE | |||
| Email Encryption Secures your mail by encrypting it during transport to the Barracuda Message Center, encrypting it at rest for storage in the cloud, and providing secure retrieval by your recipients through HTTPS web access. Create a policy to automatically encrypt emails based on their sender, content, and other criteria. |
|||
| Data Loss Prevention Create and enforce content policies to prevent sensitive data, including credit card numbers, Social Security numbers, HIPAA data, customer lists, and other private information, from being sent by email. Policies can automatically encrypt, quarantine, or block certain outbound emails based on their content, sender, or recipient. |
|||
| Cloud Archiving A cloud-based, indexed archive allows for granular retention policies, extensive search, role-based auditing/permissions, legal hold, and export. Easily comply with e-discovery requests and regulatory or policy-retention requirements. |
|||
| Cloud-to-Cloud Backup Get data protection and cloud backup for Office 365 data, including Exchange Online mailboxes, SharePoint Online, OneDrive for Business, and Teams. Fast point-in-time recovery in the event of accidental or malicious deletion. |
|||
| Data Inspector Automatically scan your OneDrive for Business and SharePoint data for sensitive information and malicious files containing malware. Use it to develop policies that comply with GDPR, CCPA, and other data privacy regulations. |
|||