Scary new malware hides in memory, uses DNS to communicate, and spreads through phishing

STU SJOUWERMAN | March 6, 2017

article image
Cisco has a separate threat research group called Talos. They just published a report on a scary new form of malware that’s hard to detect. They called it DNSMessenger, and the malicous code uses Microsoft PowerShell scripts to hide itself in memory and connect directly with a command & control server using the compromised machine's Domain Name Service port.

Spotlight

Shopperception

Shopperception provides consumer behavior information and insights at the shelf, in the store. Find out how powerful, easy and affordable the Shopperception solution is for market research New data + More information + Better knowledge = Great insights B76Lower your costs by using a massively available hardware technology. Add new and relevant metrics to your current shopper insights. Stop guessing about what happens on the store, start measuring real events. 7x24x365 operation. No more blanks and assumptions when you try to understand the shopper's behavior. Real World A/B Tests: create new angles of analysis by comparing complete sets of data before and after changes (e.g.: different shelf layouts, new POS material, running POS promotions, etc.)

OTHER ARTICLES

Ryuk: Defending Against This Increasingly Busy Ransomware Family

Article | February 12, 2020

On December 16, 2019, the U.S. Coast Guard disclosed a security incident at a facility regulated by the Maritime Transportation Security Act (MTSA). Forensic analysis suggests that the incident might have begun when an employee clicked on a link embedded in a phishing email.This action enabled a threat actor to set Ryuk ransomware loose on the facility’s network. Ultimately, the infection spread to all IT network files, leading Ryuk to disrupt the corporate IT network and prevent critical process control monitoring systems from functioning properly. Phishing is one of the primary infection vectors for most ransomware families, but there’s an interesting twist with this particular family. As noted by Malwarebytes, a typical Ryuk attack begins when a user opens a weaponized Microsoft Office document attached to a phishing email. Opening the document causes a malicious macro to execute a PowerShell command that attempts to download the banking trojan Emotet. This has the ability to download additional malware onto an infected machine that retrieves and executes Trickbot.

Read More

A COVID-19 Cybersecurity Poll: Securing a Remote Workforce

Article | March 17, 2020

As the coronavirus pandemic continues to sweep the globe, and cities and states impose social-distancing measures, businesses are sending their users home to work. And this massive, unprecedented shift to distance working brings with it a whole new set of cybersecurity challenges. For instance, a lack of IT resources can bite many organizations as they move to enable remote strategies. And when workers and students are sent outside the normal perimeter, managing device sprawl, and patching and securing hundreds of thousands of endpoints, becomes a much a bigger challenge. Threatpost editors wanted to learn more about challenges and best practices from the IT and security professionals on the front lines of this. Please take a few minutes to take the Threatpost poll. The answers will be collected the results will be published in an article later this week.

Read More

Cybersecurity Product Marketing Strategy

Article | July 20, 2021

People dealing in cybersecurity knows that it is a challenging market. A specifically designed business model is not there in cybersecurity on which you can market products and services. Over the past years, the B2B Cyber Security industry has witnessed immense growth and will continue in the future. The growth can be attributed to many aspects, including growing instances of cybercrime and the emergence of interconnected devices in the IoT revolution. New security solutions are coming into the market every day. As a result, the demand for B2B digital marketersis also on the rise to keep with the unexpected growth in products, services, and competitors. To stand out from the competition, you need a sound cybersecurity product marketing strategy leveraging all digital channels. You have to focus on various productive marketing tactics to reach, engage, and nurture all your potential clients as an ongoing process with all the relevant information about business and products. For example, the B2B cloud-security service provider,IBM Security, uses paid ad campaigns and webinars, which are excellent cybersecurity product marketing strategies. They could maketheir expertise and solutions stand out from the rest of the crowd with this excellent strategy. Reading further will give you insights on how to market your cybersecurity products effectively to generate leads and boost profit. Make your Marketing Effective with Unique Content To demonstrate the effectiveness of your solutions and the significance of your cybersecurity, your company should ensure your content has real-world examples. This will make your content more influential. Apart from being data-driven and comprehensive, your content also should be unique. Credibility can be surly built up by revamping your content strategy. You can create educational content that clearly shows how your product can help solve a real-life cybersecurity attack. Then, you may back it up with independent industry reviews,case studies, etc. Instead of reusing the same content, experiment with new content that describes and solves different cyber threats and relates it with your products and solutions. The following types of content can be a practical part of your cybersecurity product marketing strategyat different points in the buyer’s journey: Blogs In every stage of the cybersecurity buyer’s journey, blogs are great for attracting prospects. Developing some evergreen and universally relevant content will be highly useful. Describing topics about cybersecurity in your blogs, such as phishing, DNS encryption, will be a great thing for clients who have just started their research and want to learn more, starting from basics. Case Studies As CNI says, the mostcritical tactic for B2B companies iscase studies. These are exemplary and the best to engage leads who are already aware of their problems and know what solutions can solve them. Videos According to HubSpot, at least once a week, 75% of executives watch work-related videos on business websites. Additionally, 59% of executives prefer watching a video over reading text. So, it’s the best strategy to include videos in your cybersecurity product marketing efforts. Explanatory videos will work the best to tell your potential cybersecurity product clients what your cybersecurity offerings are and why they could be the most valuable solution for their situations. Additionally, when you’re trying to target C-level executives, this can be a beneficial tactic. This is because they need more education regarding this. You may also utilize various statistics on cyber-attacks, loss due to cyber-attacks, recovery expenses, and the value of cybersecurity solutions. Additionally, again, providing practical and real-life examples in your video will help you make the statistics more relevant and inject a sense of urgency into the minds of your potential clients. Effective Email Marketing Strategy Education and awareness are significant barriers to selling your solutions. Due to these barriers, it can often take a reasonable amount of time for a potential lead to reach the point where they can contact a B2B sales representative or request a demo. Meanwhile, it is your time to have a tactic to nurture these leads to move them to the next level of the sales funnel. It can be an effective email marketing strategy. It is a strategic and effective way to connectto those potential leads who have not decided to purchase your products. However, with many emails in your potential client's inboxes, they may unsubscribe or delete your email if they don’t find your email content valuable and worthwhile. So make sure to analyze often and monitor your email marketing campaigns. Content, subject lines, images, and copy in your email should be practical and attractive regarding open and click-through rates. Flooding your prospects’ inbox with emails about various cyber threats they face may result in losing their interest in your emails as they may have desensitization towards your emails. Staying connected with your prospects through email marketing is an effective cybersecurityproduct marketing strategy. First, however, be mindful of how many emails you are sending to your prospects. Interactive Sessions The tremendous interactive session you can have online today with your potential client is webinars. It is an excellent way for you in the cybersecurity domain to connect with your potential leads. The interactive element is a vital part of a webinar. Q&A session at the end of each webinar makes it more interactive where the participants can ask you questions and raise queries about the topic and your services. Accumulating all those questions asked by the attendees can be an excellent starting point for creating new content to address your audience's challenges. These attendees now are interested in learning more about your products and services and the threats it protects against. They also might have engaged in some research. This means they will do further in-depth research and be more engaged with your presentation topics. Thus, it is a valuable opportunity to demonstrate other helpful content or have a CTA for demo sign-ups. You can respond to the queries of the participants in a follow-up, even if your webinar is a pre-recorded one. This effective cybersecurity product marketing tactic will help you accumulate many potential clients and take them to the next stage of the salesfunnel. Paid Campaigns Two significant goals can be accomplished through B2B paid campaigns: • They help you get prospects to arrive at your demo request landing page • They amplify your content marketing efforts Content marketing amplification is possible through paid campaigns. Most cybersecurity marketers think that you do not mix inbound marketing and paid campaigns. But the truth is when you combine both, you end up with a very effective and powerful campaign. Once you start a paid campaign with your content, you will notice more excellent and quick results and get the best out of your developed content. Getting prospects to request a demo is a major goal for any B2B cybersecurity marketer. Cybersecuirty paid marketing campaigns, as a successful cybersecurity product marketing strategy, help the marketer to accelerate the process. Summing up The cybersecurity landscape has recently undergone many changes. Over the next five years, global demand for cybersecurity products and solutions will reach $167.7 billion. So, it calls for a remodeling of your cybersecurity product marketing strategynow more than ever to target and attracts more prospects to your business. Frequently asked questions How to start with cybersecurity marketing? The best way to start your cybersecurity marketing is by educating your prospects about the potential cyber threats they may face in their business. In addition, you can educate them about the latest news in the industry regarding cybersecurity. Why is cybersecurity essential for marketers? Neglecting cybersecurity or taking it for granted may cause privacy risks for you and your clients. In addition, cyber threats can be detrimental for businesses. How can marketing help to improve cybersecurity products? While marketing, you may understand the quality of your product, competing with your counterparts in the market. Also, you may get feedback from potential customers. It calls for the necessity of product improvement. { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{ "@type": "Question", "name": "How to start with cybersecurity marketing?", "acceptedAnswer": { "@type": "Answer", "text": "The best way to start your cybersecurity marketing is by educating your prospects about the potential cyber threats they may face in their business. In addition, you can educate them about the latest news in the industry regarding cybersecurity." } },{ "@type": "Question", "name": "Why is cybersecurity essential for marketers?", "acceptedAnswer": { "@type": "Answer", "text": "Neglecting cybersecurity or taking it for granted may cause privacy risks for you and your clients. In addition, cyber threats can be detrimental for businesses." } },{ "@type": "Question", "name": "How can marketing help to improve cybersecurity products?", "acceptedAnswer": { "@type": "Answer", "text": "While marketing, you may understand the quality of your product, competing with your counterparts in the market. Also, you may get feedback from potential customers. It calls for the necessity of product improvement." } }] }

Read More

5 Benefits of Investing in Cyber Security & IT solutions in 2021

Article | June 2, 2021

Cyber Security has quickly evolved from being just an IT problem to a business problem. Recent attacks like those on Travelex and the SolarWinds hack have proved that cyber-attacks can affect the most solid of businesses and create PR nightmares for brands built painstakingly over the years. Investing in cyber security training, cyber security advisory services and the right kind of IT support products, has therefore, become imperative in 2021. Investing in cyber security infrastructure, cyber security certification for employees and IT solutions safeguards businesses from a whole spectrum of security risks, ransomware, spyware, and adware. Ransomware refers to malicious software that bars users from accessing their computer system, whereas adware is a computer virus that is one of the most common methods of infecting a computer system with a virus. Spyware spies on you and your business activities while extracting useful information. Add social engineering, security breaches and compromises to your network security into the mix, and you have a lethal cocktail.

Read More

Spotlight

Shopperception

Shopperception provides consumer behavior information and insights at the shelf, in the store. Find out how powerful, easy and affordable the Shopperception solution is for market research New data + More information + Better knowledge = Great insights B76Lower your costs by using a massively available hardware technology. Add new and relevant metrics to your current shopper insights. Stop guessing about what happens on the store, start measuring real events. 7x24x365 operation. No more blanks and assumptions when you try to understand the shopper's behavior. Real World A/B Tests: create new angles of analysis by comparing complete sets of data before and after changes (e.g.: different shelf layouts, new POS material, running POS promotions, etc.)

Events