ANTIVIRUS EVASION WITH METASPLOIT’S WEB DELIVERY

July 6, 2018

It’s a never ending cat-and-mouse game: bad guys develop malware and good guys try to detect and mitigate malware to protect the end user. Whenever manufacturers of antivirus software come up with a new method of detecting malicious code or files, hackers find a way to circumvent that technique. One particularly elegant technique of transmitting and executing malware has gained popularity in the last couple of years with both hackers and pentesters alike: Microsoft’s built-in tool PowerShell. It provided a convenient way of executing code directly in-memory without ever touching the disk. Since many antivirus products relied on scanning executables which are written on the disk, this attack vector was completely invisible to them.

Spotlight

Allen Corporation of America

Allen Corporation of America's mission is to provide professional services and best-in-class products to both public and private sector clients. We specialize in several major technology areas, including: Logistics; Cyber Security; Technology; Training Systems; Integrated Networks; and Enterprise Management. Allen Corporation is the parent company of WetStone Technologies, an industry leader in software products (Gargoyle, LiveWire Investigator, StegoSuite, LiveDiscover, Sovereign Time, FairWitness), training, services, and research and development in the areas of advanced threat identification, steganography, trusted time-stamping, digital investigation and computer forensics.

OTHER WHITEPAPERS
news image

Simplify Data Protection for VMware Workloads with Veeam Data Platform

whitePaper | March 1, 2023

Outages and data loss are an unfortunate reality for businesses today. These outages can cause big risks to your company’s reputation and revenue, as every minute of downtime means that critical data isn’t accessible to your business. If things weren’t complicated enough, managing a complex, hybrid, multi-cloud environment makes continuity even harder. These challenges increase complexity exponentially, greatly impacting your ability to stay in control.

Read More
news image

The State of ICS/OT Cybersecurity in 2022 and Beyond

whitePaper | October 26, 2022

The industrial control system (ICS)/operational technology (OT) security community is seeing attacks that go beyond traditional attacks on enterprise networks. Given the impacts to ICS/OT, fighting these attacks requires a different set of security skills, technologies, processes, and methods to manage the different risks and risk surfaces, setting ICS apart from traditional IT enterprise networks.

Read More
news image

Dashlane - Security White Paper August 2022

whitePaper | August 30, 2022

Access to the user’s data requires using the User Master Password which is only known by the user. It is used to generate the symmetric Advanced Encryption Standard(AES) 256-bit key for encryption and decryption of the user’s personal data on the user’s device. We useWebcrypto API for most browser based cryptography and the native libraries for IOS and Android.

Read More
news image

2023 Hybrid Cloud Security Survey

whitePaper | June 26, 2023

While we are witnessing a modest slowdown in cloud migration due to rising costs and economic uncertainty, it remains that a multitude of organizations now have a hybrid infrastructure in place. According to Forrester analysts,1 this is deemed very much the norm and reports show 72 percent of organizations exist in the hybrid cloud.2 This is because enterprises will likely have paired their own data center/private cloud with one or more public clouds as a result of acquisition or to reap a number of benefits: Cisco, for example, identified 42 percent of organizations believe they achieve a more agile and scalable development environment within the hybrid cloud, alongside 40 percent who realize accelerated business agility and innovation.3

Read More
news image

A Lifeline: Patient Safety and Cybersecurity

whitePaper | December 3, 2019

Healthcare information is unique and personal to us all.Indeed,the patient is at the center of healthcare, as it would not exist if the patient did not exist. Bits and bytes in today’s digital world have real significance when it come to patient care lives are on the line.

Read More
news image

The State of Ransomware in Manufacturing and Production 2022

whitePaper | October 6, 2022

Sophos' annual study of the real-world ransomware experiences of IT professionals in the manufacturing and production sector has revealed an ever more challenging attack environment. Together with the growing financial and operational burden ransomware places on its victims, it also shines new light on the relationship between ransomware and cyber insurance - including how insurance drives changes to cyber defenses.

Read More

Spotlight

Allen Corporation of America

Allen Corporation of America's mission is to provide professional services and best-in-class products to both public and private sector clients. We specialize in several major technology areas, including: Logistics; Cyber Security; Technology; Training Systems; Integrated Networks; and Enterprise Management. Allen Corporation is the parent company of WetStone Technologies, an industry leader in software products (Gargoyle, LiveWire Investigator, StegoSuite, LiveDiscover, Sovereign Time, FairWitness), training, services, and research and development in the areas of advanced threat identification, steganography, trusted time-stamping, digital investigation and computer forensics.

Events