Infotrealers on the Rise: The last concern about the organization’s defenses

Infantes infants are quickly becoming one of the most dangerous tools in the arsenal of a hacker, particularly in environments where email It is still a primary communication channel for companies. In its nucleus, infosteators are a type of Trojan designed by malware Authors to reap confidential data, such as login credentials, financial information, system details and personal identification information.

These malicious files are designed to extract as much information as possible, operating quickly and stealthily. Once collected, stolen data is sent to command and control servers, where they can be exploited for several malicious purposes.

Kumar Prashant

X-LABS security researcher in Forcepoint.

Infants of infants in nature

Some investigations suggest that the infostractors hit up to 10,000 victims per day; However, Forcepoint research teams have observed a greater activity of several infants of infants recently, pointing to the victims in several ways.

The first is the Vipkeylogger, which circulates through Phishing campaigns as an attached file that takes the form of a file or Microsoft Office Archives. This exfiltrates data using instant or dynamic messaging telegrams services DNS services. The opening of the attached file leads to a sequence of events that finally end in a series of data exfiltration, such as recording key pulsations, collecting information such as clipboard data, screenshots, browse history and more.

Strela Stealer is also distributed through phishing campaigns that contain attachments that contain an obfuscated script, and in the execution of script, perform malicious activities and collect confidential information, including user names, passwords and other details of email configuration , sending it through command and control servers.

Finally, the Rhadamanthys robber was distributed in the holiday season and disguised himself as emails from the travel industry with attachments of malicious documents. By clicking on the documents, it triggers a chain of offices and scripts to steal user credentials and cryptocurrency wallet data. This campaign resembles the previous attacks of Agent Tesla, but uses new obfuscation techniques.

It is not necessary to say that the infostitors are frequent and appear in several different formats, which makes them more difficult than ever to defend themselves, which raises the question: how can you protect against increasingly sophisticated infinitors?

Protection against infants infants

If it was no longer clear, the emergence of infants of infants emphasizes the need for a sophisticated and holistic approach to defend their organization. To work more effectively, this approach must combine essential security measures, such as multifactor authentication, with a proactive mentality. Cybercriminals continually evolve their tactics, so organizations must also remain at the forefront.

Companies must make common practices by minimizing vulnerabilities by raising the data at rest and moving to ensure that only authorized people have access to confidential data. Data loss prevention (DLP) Email solutions can help companies obtain control over incoming and outgoing threats by means of virus and malware blocking, spam filtering, content filtering and email file. And, of course, when they regularly update and host security audits, organizations can better understand if their security measures are effective and where they lack.

However, possibly one of the most important parts of the defense of an organization is its people. Employees must be aware of their role in organizational security. This includes basic concepts, such as maintaining safe passwords and leverage technologies as MFA, but must also include its ability to be constantly cybernetic. This means that organizations have a role to act to ensure that employees know how to identify and act when they face an attack, otherwise they have the potential to without knowing it, the entire kingdom from the inside. Human error can be the weakest link in the security chain, so it is important that the staff be educated.

Infantes infants represent a growing and insidious threat in the current digital era, taking advantage of unprotected organizations and unknown people. By combining strong technical defenses with a culture of security awareness, companies can significantly reduce the risk of becoming a victim of these cyber attacks. When everything is said and done, proactive prevention and informed employees are the best defense line.

We have compiled a list of the best business password administrators.

This article was produced as part of the Techradarpro Insights Expert Channel, where we present the best and most brilliant minds in the technology industry today. The opinions expressed here are those of the author and are not necessarily those of Techradarpro or Future PLC. If you are interested in contributing, get more information here: