According to Marc Henauer, head of the cyber-crime division at the Swiss Justice and Police Department, new types of malware and virus are hitting the web that is making it difficult for anti-virus and other security softwares to detect.
He said in an interview last week that viruses and other malware now have the capability to change their signature every few hours. This new developments in malware is allowing attackers to stay one step ahead of security software.
Geoff Sweeney, chief technology officer at Tier-3, a behavioural analysis IT security firm, was also of the opinion that because of this signature change these malwares are able to dodge anti-virus easily.
Self-changing code designed to dynamically evade recognition is a fact of life. It automatically adapts to the anti-spam and anti-malware engines that it encounters.
He said.
Because programs and code used to create this shape-shifting threat are now readily available this is unleashing a wave of malware based on social engineering techniques.
According to Sweeney:
Highly targeted emails containing personalized information and shape-shifting Trojan attachments are the latest development. Each positive infection increases the ‘hit rate’ for the next wave of emails sent out by the self-learning automated engines used by sophisticated attackers.
He believes that to effectively counter these types of malwares a non rules-based monitoring process is required that willl defend all ingress and egress points covering SMTP, DNS, HTTP(s), IM etc.
Once this is in place, defence against shape-shifting threats becomes possible as does the removal of any previously established covert data leakage channels that will be revealed and dealt with.
he concluded.
iEntry 10th Anniversary
Contact Us

0 responses so far
There are no comments yet...Kick things off by filling out the form below.
Leave a Comment