A Modern compromise at a corporation directed to a noteworthy amount of data being stolen, emphasizing that traditional software defenses are in trouble to catch obfuscated attacks, security firm Finjan pronounced in its monthly analysis of Internet threats.
In the report, dubbed the malevolent Page of the Month, the company lays claim that a desktop PC at an nameless business firm had been infected with a data-stealing Trojan horse. The fire came through as the firm’s antivirus software system and static online filters could not discover the jumbled attack code as a scourge, Finjan stated in the report. The result: The harmful software downloaded code from a host in Utah and sent files and transcripts of a lot of corporate users to a second server in Texas.
"By utilizing the stolen information, they (the attackers) can now get into the e-mail account of the corporate employee, read his/her e-mails, reply on his/her behalf, and get at other systems run by the company," Finjan said. “It is not needed to mention, this is the highest nightmare of any executive, no matter if it is a public or private company."
Antivirus companies -- including Symantec, the proprietor of SecurityFocus -- have recognised that the high-octane obfuscation of attack code causes keeping up software defenses a lot more difficult. Last year, the total number of computer virus variants exceeded a half million, more than double the year before, because cyberspace crooks apply obfuscation processes to turn a individual virus into a large number of attacks.
Finjan found out that 80 percent of the code it has received on the World Wide Web has been obfuscated to more or less degree.
"The manipulation of dynamic code puzzlement holds extending to Modern degrees of attack sophistication and prevalence 'in the wild,'" Finjan wrote. "It has turned the cyber law-breaking weapon-of-choice due to its effectualness in bypassing traditional signature-based solutions."
Finjan did not even mention the name of neither the company nor the type of antivirus software the firm used. The critique of static-URL and signature-based defenses is a most common theme in Finjan's marketing.
|