| Crimeware is programming that is designed to facilitate illegal online activity. The use of crimeware is primarily financially motivated. Crimeware kits enable a person without much technical experience to create, customize and distribute malware. Such kits are readily available for purchase on the dark net and can be used by cybercriminals to engage in malicious activities such as stealing corporate data, launching denial of service attacks, building botnets or distributing malware. Crimeware kits are known by a variety of names, including infection kit, exploit kit, DIY attack kit and malware toolkit. The more sophisticated crimeware programs evade detection by most spyware scanning programs and will not be detected by most firewalls. As of this writing, command-and-control server crimeware is the most popular type of crimeware kit, but recent changes have shown that attackers are increasingly moving toward denial of service (DoS) as an attack vector for cyberextortion. This approach allows the attacker to demand a ransom from the victim in order to restore service. To guard against crimeware, an organization should deploy anti-malware software as well as security programs that continually monitor security controls and evaluate their effectiveness. Enterprises should also install anti-phishing tools because many exploit kits use phishing or compromised websites to penetrate the network.
The most likely infection point in most organizations is through end users, so security awareness training should be provided on a continual basis to prevent crimeware exploits from being successful.
| 
Posts
No comments:
Post a Comment