Having an anti-virus device on the edge of your email network is important, but you can’t rely on it entirely. If you’ve got your AV doing hourly updates, that means you’ve got a 1 hour window for someone to exploit.  In my case, any executable files are forwarded to my account for manual review. Most of these are obvious phishing attempts or viruses.  This week, I caught one that looked real, and decided to dig into it a bit more.

Continue reading →