April 20, 2017 By Larry Loeb 2 min read

Marketers often use a tool called email tracking to monitor their marketing campaigns. According to Check Point Software, cybercriminals can also use this technology to map out networks they want to penetrate.

Email Tracking Explained

Marketers first came up with the idea of tracking pixels, also called web beacons and web bugs, that are initially embedded into messages or attachments. They load when a recipient opens an email.

The sender of the message can then receive information regarding many identifiers, including if an email has been opened, how many links are clicked, what platform the receiver uses and the status of the message. These details help marketers evaluate the efficacy of their campaigns.

One of the problems with tracking pixels is that most end users do not even realize they are being tracked in the first place. The pixel is usually disguised to look like part of an image. Marketers may think they are being subtle by not alerting users of the tracking, but bad actors can use the same technique to be sneaky.

Cybercriminals leverage various tactics to influence victims to spread fraudulent emails throughout their organizations. As a malicious message makes its way through the enterprise, it collects more data for fraudsters to track. This journey gives attackers an inside look at who is likely to open a fake email and what systems they use, enabling them to focus on particularly vulnerable targets.

Insecure by Default

Some browser programs allow enclosed email images to be automatically downloaded. If this is the default behavior, tracking pixels will slip right though any defenses. To protect themselves from this threat, users should set their browsers to request permission to download images.

Bleeping Computer noted that desktop email clients block images by default, giving users some control. Chrome extensions such as UglyEmail and PixelBlock can also stop images from loading by default.

This report offers yet another example of cybercriminals’ proclivity for repurposing legitimate tools for nefarious purposes. The only way to avoid becoming a target is to take control of email and browser settings, and be aware of possible avenues of attack.

More from

Apple Intelligence raises stakes in privacy and security

3 min read - Apple’s latest innovation, Apple Intelligence, is redefining what’s possible in consumer technology. Integrated into iOS 18.1, iPadOS 18.1 and macOS Sequoia 15.1, this milestone puts advanced artificial intelligence (AI) tools directly in the hands of millions. Beyond being a breakthrough for personal convenience, it represents an enormous economic opportunity. But the bold step into accessible AI comes with critical questions about security, privacy and the risks of real-time decision-making in users’ most private digital spaces.AI in every pocketHaving sophisticated AI…

Government cybersecurity in 2025: Former Principal Deputy National Cyber Director weighs in

4 min read - As 2024 comes to an end, it’s time to look ahead to the state of public cybersecurity in 2025.The good news is this: Cybersecurity will be an ongoing concern for the government regardless of the party in power, as many current cybersecurity initiatives are bipartisan. But what will government cybersecurity look like in 2025?Will the country be better off than they are today? What are the positive signs that could signal a good year for national cybersecurity? And what threats should…

FYSA – Adobe Cold Fusion Path Traversal Vulnerability

2 min read - Summary Adobe has released a security bulletin (APSB24-107) addressing an arbitrary file system read vulnerability in ColdFusion, a web application server. The vulnerability, identified as CVE-2024-53961, can be exploited to read arbitrary files on the system, potentially leading to unauthorized access and data exposure. Threat Topography Threat Type: Arbitrary File System Read Industries Impacted: Technology, Software, and Web Development Geolocation: Global Environment Impact: Web servers running ColdFusion 2021 and 2023 are vulnerable Overview X-Force Incident Command is monitoring the disclosure…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today