Many people are unaware of the existence of a buffer that operates before emails are sent to the inbox, blocking any malware before the message is sent.
However, over time, email providers, most notably Gmail, have focused on adding warning labels to messages containing suspicious links or attachments.
See more: Gmail blocks Outlook emails as spam
Despite these efforts, 91% of cyber attacks still originate from inbound traffic.
If you think Google, Apple , and Microsoft could do more, you're absolutely right. But why aren't they?
First, let's consider how serious the situation is right now
In a previous edition of 9to5Mac Security Bite, we discussed a recent study from browser security startup SquareX. The study revealed how little companies are doing to block malicious attachments to protect users.
The research team collected various types of malware and attached them to emails sent via Proton Mail to addresses in iCloud Mail, Gmail, Outlook, Yahoo! Mail, and AOL, which is part of the Yahoo! group. Specifically, if the emails are successfully delivered to users, they may be vulnerable to any potential threats contained in the attached files.
The table below summarizes the results of sending 7 out of 100 malicious samples to various email providers, showing whether the malicious attachment was delivered or not. According to the SquareX study, “if an email was not delivered, this is an indication that the malware was detected during processing by the server.”
Read more: Microsoft: North Korean hackers Moonstone Sleet are linked to new ransomware FakePenny
The dilemma
Investing in strong email security features may seem like the key to protecting users. But Ian Thornton-Trump, CISO of threat intelligence solutions firm Cyjax, told Forbes, “That’s like asking why free Wi-Fi at Starbucks doesn’t block most or all cyberattacks .” He explained that it’s difficult to combine freedom and security in the same sentence.
Thornton-Trump points out that incorporating advanced security features into emails can create significant problems with false positives. These can require the use of technical support resources to resolve or fix, which could be financially unviable for millions of users of a free platform.
Additionally, some argue that email providers are delaying implementing a change that would require significant resources and impact their bottom line.
See also: Russian hackers APT28 target Europe with HeadLace malware
With iOS 18, macOS 15, and more set to be released next week, we can't wait to see if Apple will integrate AI- into the Mail app. These features could analyze attachments and URLs in emails in real time.
Source: 9to5mac
