For example, in 2020, it was observed using COVID-19-themed lures in email attacks. It uses a wide range of spreading mechanisms-phishing emails, exploits, USB devices, brute force, among others-and it has shown that it can quickly take advantage of news, events, or the release of new exploits to run effective campaigns. It’s one of a few documented bot malware families that targets Linux systems as well as Windows devices. LemonDuck’s threat to enterprises is also in the fact that it’s a cross-platform threat. Today, beyond using resources for its traditional bot and mining activities, LemonDuck steals credentials, removes security controls, spreads via emails, moves laterally, and ultimately drops more tools for human-operated activity. LemonDuck, an actively updated and robust malware that’s primarily known for its botnet and cryptocurrency mining objectives, followed the same trajectory when it adopted more sophisticated behavior and escalated its operations. We’ve seen this in banking Trojans serving as entry point for ransomware and hands-on-keyboard attacks. Anything that can gain access to machines-even so-called commodity malware-can bring in more dangerous threats. SSO solution: Secure app access with single sign-onĬombating and preventing today’s threats to enterprises require comprehensive protection focused on addressing the full scope and impact of attacks.Identity & access management Identity & access management.App & email security App & email security.
0 kommentar(er)
