Cyber systems overlooking how attackers actually work, says study

Most cyber defence systems and strategies fail to factor in how attackers reallyoperate, reveals a recent report.

Most businesses place an emphasis on malware detection. However, attackers are not being detected due to the tools falling under the category of legitimate, standard software, finds LightCyber Cyber Weapons 2016.

Although they do use malware in their attacks, the report found that hacking plays a more significant role in making threats. They also use remote access and admin tools, including LogMeIn, Ammyy Admin, and TeamViewer, to expand throughout the network before exploiting more computers to access confidential information.

Cyber criminals utilise well-known, and common networking tools in order to map out the network, monitor activity, and probe clients. They use such standard utilities as Windows Credential Editor.

Most organisations focus on detecting malware, but attackers are going undetected because most of the tools that they use are standard, legitimate software, according to LightCyber’s Cyber Weapons 2016 report.

Attackers use common and well-known networking tools to map out the network, probe clients and monitor activity. Standard utilities such as NCrack, Mimikatz and Windows Credential Editor can be used to steal or crack user credentials.

As cyber criminals become more sophisticated, it is up to organisations to fill cyber security jobs with those who are savvy and skilled enough to keep pace with modern cyber crime. The consequence of failing to do so could ultimately be a disaster in an age where customers are more aware and more cautious than ever when it comes to personal data.