Real-time assessment and blocking function to be added to m-FILTER® Ver. 5 on December 5
～100% blocking of fake e-mails impersonating major companies～

TOKYO, Japan (December 6, 2017) – Digital Arts Inc. (headquartered in Chiyoda-ku, Tokyo, Japan, CEO: Toshio Dogu, hereinafter referred to as “Digital Arts”, Code 2326), a leading provider of information security software, has released m-FILTER Ver.5.01 on December 5. It is a solution for both business and public entities that blocks in real-time malicious e-mails impersonating financial institutions and large major companies.

In the latter half of last year, a wide variety of banking-related malware impersonating major companies were confirmed, and since this summer many e-mails impersonating major financial institutions have also been confirmed. In addition, other kinds of e-mails are beginning to appear, and have recently expanded from financial institutions to now impersonating ‘NHK on demand’, ‘Sagawa Kyubin’ and other major companies. To prevent the spread of infection by this kind of banking malware, the Japan Cybercrime Control Center (JC 3) updated warning information1 on December 5, 2017, explaining that the files and URLs attached to these e-mails may be infected with banking malware, and that financial-related information is stolen and may be involved in crime such as illegal remittance via internet banking.

It is said that it is difficult for counterfeit e-mails impersonating financial institutions or major companies to be detected by virus checks and sandboxes. In m-FILTER Ver. 5.01 contains a function that decides in real time when a fake e-mail carrying a specific pattern (how the e-mail is made) is received.

Disguised e-mail that can be screened by m-FILTER Ver.5.01

By verifying samples of existing fake e-mails obtained by our company, we have confirmed that we managed to block 100% of the malicious e-mails with m-FILTER Ver. 5.01. Furthermore, by using this function, attacks with similar patterns can be blocked 100% even if they are previously unknown e-mails.

• ※ 1 Source: Internet Banking Attention to virus-infected malware

Verification environment

m-FILTER Ver.5.01R01

Method of verification

Received malicious e-mail sample posing as a financial institution, major company, etc. acquired by Digital Arts via m-FILTER Ver. 5.01

Verification sample

Partial excerpts of the alert information published by Japan Cybercrime Control Center (JC 3) and the same sample taken by Digital Arts (as of December 5, 2017).

Sender	Subject
Apple<noreply@email.apple.com>	Reset your Apple ID security question.
auto_confirm@surugabank.co.jp	Suruga Bank Reserve plan card application
cdr@shieldex.biz	FW: Rakuten - Notice of change of member information
Disney<tickets@mail.disney.co.jp>	Free admission ticket for Disneyland!
e-biz_info@dn.smbc.co.jp	Sumitomo Mitsui Banking Corporation Request for ValueDoor electronic authentication setting
kansai ebusiness <kansai_ebusiness@sagawa-exp.co.jp>	Sagawa Express - Confirmation of billing content
mizuho-cardloan@p.onet.orico.co.jp	“Mizuho Bank Card Loan” Notification of provisional application results
myinfo@rakuten.co.jp	Rakuten - Notice of Change of Member Information
MyJCB<mail@qa.jcb.co.jp>	JCB card November 10, 2017 Confirmation of transfer details
noreply@email.apple.com	Please reconfigure your Apple ID security question.
purchase@ml.nhk-ondemand.jp	NOD - Purchase procedure completed
support@j-payment.co.jp	Credit card settlement is completed
tsuhan@nttxstore.jp	NTT-X Store - Notification of product shipment
VJA gift card Internet shop <scgiftcard@smbc-card.com>	Thank you for your order
Orix Credit<vip@credit.orix.co.jp>	Confirmation of Completion of Effort Accepted, Orix Credit
Mitsubishi UFJ Trust and Bank <account_post@tr.mufg.jp>	Mitsubishi UFJ Trust and Banking - Account opening application acceptance
Rakuten Card Co., Ltd. <support@mail.rakuten-card.co.jp>	Important Information from Customer Center, Rakuten Card Co., Ltd.
Rakuten Card Co., Ltd.<info@mail.rakuten-card.co.jp>	Information on account transfer date, Rakuten Card Co., Ltd. (Rakuten Card)
Rakuten Card Co., Ltd.<info@mail.rakuten-card.co.jp>	Rakuten Card Information on amount to be charged
Rakuten Card Co., Ltd.<info@mail.rakuten-card.co.jp>	Important, Regular ID / password change request / Computer virus warning
Rakuten Card Co., Ltd. <myinfo@rakuten.co.jp>	Card usage notice
Rakuten Bank<myinfo@rakuten.co.jp>	Important, About launching of “PhishWall Premium” for unauthorized remittance / anti-phishing software