DATASHEET

BrightCloud® Real-TimeAnti-Phishing Service
Effective, real-time protection againstzero-hour phishing attacks

Overview• The most dangerous phishing sites are short-lived, living
minutes or hours, not days
• Static phishing lists are too slow to keep up with the paceof today’s attacks• The BrightCloud® Real-Time Anti-Phishing Serviceprovides technology partners with the ability to leveragetime-of-need site scans to prevent users from visiting
malicious sites
The number of phishing attacks continues to grow. Phishingsites are designed to evade detection by block lists, crawlingengines and law enforcement. Additionally, because themajority of today’s phishing sites are active for hours, notdays, static phishing lists are too slow to keep up. By the time
blocklists are published, many of the sites they contain are nolonger active. You need answers in milliseconds, not days.
The BrightCloud® Real-Time Anti-Phishing Service is the only
truly effective live protection against zero-hour phishingattacks. We apply advanced machine learning using
thousands of feature vectors. For nearly a decade, thesefeature vectors have been trained to consistently monitor forthe latest phishing trends. We determine whether the site isphishing at the precise moment it is encountered, meaning
our analysis and determinations are never stale. Thisapproach allows for a highly effective phishing determinationengine with a false positive rate consistently below 1%.
Real-time URL validation is the only truly effective protection
against zero-hour attacks, disguised redirection and recently
hijacked websites. The BrightCloud® Real-Time Anti-Phishing
Service catches advanced phishing attacks by providing
time-of need protection through real-time scans immediately
before sites are visited.
Phishing and spear phishing attacks are now aimed atorganizations of all sizes and are a preferred method
cybercriminals use to breach networks.

There was a 770% increase in phishing
during the month of May compared tothe average for the previous months.
November was by far the most active
month for phishing, with 34.3% of allactivity for the year.2
Phishing analysis by F5 Labs found scans of phishing sites
from BrightCloud® Threat Intelligence showed that 72%
used HTTPS. Phishers are playing on the trust users haveof the green lock as another way to make their URLs seem
legitimate.1 Phishing attacks are so sophisticated, they oftenfool IT security professionals.

Stopping Phishing Attacks in Their Tracks
The BrightCloud® Real-Time Anti-Phishing Service crawls
potential phishing links and determines their risk level inreal-time, helping prevent security breaches and data lossby leveraging advanced machine learning and content
classification to automate phishing detection. The service
crawls and evaluates requested URLs in milliseconds using
hundreds of site attributes as well as external factors
associated with the site. This includes correlated intelligencefrom the contextual analysis engine, such as the reputationof embedded links, the geolocation of the hosting IPs, thelength of time the site has existed and the history of threatson that domain. The service returns a risk score for eachrequested URL.
Add-on BrightCloud® Threat Insights for the Real-Time AntiPhishing Service for supplementary information on phishing
URLs. This includes:• Identifying the target of the phishing site so users canidentify patterns in attacks and focus their analysis• A snapshot of the phishing site when it was live to enable
customers to see what the site looked like• Additional data on the URL used for the phishing attack• Searching for phishing URLs that attempt to imitate aspecific brand or website

Integrate with benefits

Integration Options

1. Dynamic and real-time ‘latest’ classification ofpotential phishing sites

BrightCloud® provides a RESTful web service, as well as
an SDK, allowing technology partners to incorporate theBrightCloud® Real-Time Anti-Phishing Service into their ownsolutions with ease. Additionally, this service combines withexisting security solutions through the same SDK as other
BrightCloud services, making integration as simple andstraightforward as possible.

2. Minimized risk of compromise due to accidental
interaction with phishing site
3. Simple and flexible integration for policy-based
compliance

BrightCloud® Real-Time Anti-Phishing
Service in Action
Whenever users access the internet, the BrightCloud®
Real-Time Anti-Phishing Service can protect them from
accidentally compromising their accounts or picking up
malware or ransomware from malicious sites.
Additionally, this service can be integrated to:• Improve web security for network appliances• Identify new zero-hour threats for anti-fraud services• Provide safe web browsers and plugins• Enhance email filtering software and endpoint
security products• Filter user generated content in social networks,
blogs and messaging apps

122020 Phishing and Fraud Report, F5 Labs
2022 BrightCloud® Threat Report

Contact us to learn more
BrightCloud.com
Phone: +1 800 870 8102
About BrightCloud
BrightCloud was the first threat intelligence platform to harness the cloud and artificial intelligence to stop zero-day threats in real-time. The platform is used tosecure businesses and their products worldwide with threat intelligence and protection for endpoints and networks. With more than 10 years of experience inbuilding and analyzing the industry’s most robust internet threat database, BrightCloud has the strongest coverage model, fewest uncategorized objects andthe most historical records which others cannot replicate.
In 2019, BrightCloud was acquired by OpenText, a global leader in Enterprise Information Management. As a whole, we are a market leader in cyber resilience,
offering total endpoint protection and disaster recovery for businesses of any size.

© 2022 Open Text. All rights reserved. OpenText and BrightCloud are trademarks of Open Text or its subsidiaries. All other trademarks are the propertiesof their respective owners. DS _012122