Trellix Cyber Resilience in Motion

AFFECTEDSally MorganFinanceFIN-LT-042

SIGNAL

OBSERVEDSIGNAL

A procurement mailbox received a convincing message carrying a malicious document and link.

LIVE

Standing by.

TRELLIXEmail Security inspects the attachment and URL; what has no signature; Threat Intelligence links it to a known campaign.

Ready · Press play

Nine stages, one department, from first contact to contained and recovered.

STAGE 01 · DELIVERYDeliveryWeaponised supplier email

Threat observed before user execution

WHAT HAPPENS IN THIS STAGE

01
Message arrives
A convincing supplier email reaches a procurement mailbox carrying a weaponised document and a link.
02
Content inspected
Attachment, URL and sender are examined before the message is allowed to reach the user.
03
Campaign context added
Threat intelligence connects the artefacts to a wider campaign rather than treating them as isolated.

WHAT TRELLIX COULD DO TO PREVENT IT

WHERE THE PRODUCTS SIT IN YOUR ENVIRONMENT

Message, content, data and intelligence controls positioned across the SaaS communication path.

Message boundaryInbound / outbound email · Sender and URL checks

Content analysisAttachments · Links · Collaboration files

Data & peopleSensitive content · User readiness

Shared intelligenceEnterprise reputation · Campaign context

WHAT TRELLIX WILL SEE AND COLLECT020 volatile

Supplier message · headers and URLs

Sender, routing, attachment hash and link reputation for the delivered message.

FILE

Weaponised attachment

The malicious document, with its verdict from the .

03:00/ 03:00