Securonix Phishing Analyzer is a machine learning-based capability designed to detect sophisticated phishing and business email compromise that bypass traditional email gateways, especially as remote work increases phishing volume. It analyzes inbound email gateway logs and applies visual similarity and identity analytics to uncover typosquatted and impersonation domains, then uses threat chains to connect related alerts and prioritize response by risk. The brief describes a tunable visual-similarity approach based on modified Levenshtein distance, plus a three-stage review of sender, recipient, and indicators like URLs, executables, unusual IPs, and domain age to flag high-risk messages without adding another standalone product.

Join for free to read