Express Computer
Home  »  News  »  Sophos Reports on the Growing Menace of Droppers-as-a-Service

Sophos Reports on the Growing Menace of Droppers-as-a-Service

Sophos, a global leader in next-generation cybersecurity, has published new research, “Fake Pirated Software Serves Up Malware Droppers as a Service,” detailing how droppers for hire are delivering bundles of malicious and unwanted content to targets looking for “cracked” versions of popular business and consumer applications

0 76

Sophos, a global leader in next-generation cybersecurity, has published new research, “Fake Pirated Software Serves Up Malware Droppers as a Service,” detailing how droppers for hire are delivering bundles of malicious and unwanted content to targets looking for “cracked” versions of popular business and consumer applications. Sean Gallagher, senior threat researcher at Sophos, said, “Paid download and dropper services have been around for a long time, but they continue to evolve and thrive and make money for the operators behind them. Our research suggests that this success is due in part to the fact that underground demand for account access credentials remains high, and these paid-for services enable less-skilled cybercriminals to implement bulk credential theft and cryptocurrency fraud at minimal cost.

“The dropper-as-a-service operators have also adapted to maximize their profits by bundling a range of malicious or unwanted content in each dropper, hitting victims with a raft of toxic applications in a single download.

“The last 18 months have seen millions more people working from home and often using personal devices to do that work. This has extended the risk of malicious dropper downloads to businesses and brought potentially far more lucrative corporate targets within the range of entry-level adversaries. For instance, our research uncovered droppers delivering backdoors such as Glupteba alongside information stealers such as Raccoon Stealer and Crypto Bot.

“Fortunately, when it comes to organizational security, malware delivered by droppers is easily detectable by security software, either because of its signature or its behavior. However, because malicious packages are in encrypted archives, security technologies don’t detect the malicious files until they are unpacked.”

Dropper-as-a-Service: what happens

SophosLabs recently published research into the Raccoon Stealer information stealer, which was delivered to targets as part of a malicious bundle by a dropper-as-a-service. In a follow up to this research, SophosLabs researchers have analyzed how these dropper services deliver their multiple payloads.

How to defend against droppers

Sophos recommends that organizations review their security software, settings and policies to ensure they can detect and block malicious and unwanted downloads.

This includes having a robust approach to web filtering. The malware hidden inside a dropper package may only be detectable once it is unpacked and by then it could already be inside the network. A good web filter will not only scan regular downloads, but also inspect encrypted network traffic. According to Sophos research, more than half of malware now use Transport Layer Security (TLS) encryption for communications. Web filters also protect organizations and its employees from connecting to dangerous or untrustworthy servers in the first place, by blocking bad domains and URLs.

Organizations should complement network security with up-to-date endpoint protection that has behavioral detection capabilities on all of the devices that employees use to remotely access work-related services.

Sophos Firewall and Intercept X for endpoints provide all this functionality and more, including ransomware protection.

Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats. It is also good security practice to avoid downloading and installing unlicensed software from any source. Always check first to make sure it’s legitimate.

Advertisement

Leave A Reply

Your email address will not be published.

LIVE Webinar

Digitize your HR practice with extensions to success factors

Join us for a virtual meeting on how organizations can use these extensions to not just provide a better experience to its’ employees, but also to significantly improve the efficiency of the HR processes
REGISTER NOW 
We are Live Now !

TECH SENATE-2022
REINVENTING FOR THE FUTURE
DAY-3

Join our live event and learn how to use the latest technologies to future proof your IT infrastructure.
WATCH NOW
India's Leading e-Governance Summit is here!!! Attend and Know more.
Register Now!
close-image
Attend Webinar & Enhance Your Organisation's Digital Experience.
Register Now
close-image
Enable A Truly Seamless & Secure Workplace.
Register Now
close-image
Attend Inida's Largest BFSI Technology Conclave!
Register Now
close-image
Know how to protect your company in digital era.
Register Now
close-image
Protect Your Critical Assets From Well-Organized Hackers
Register Now
close-image
Find Solutions to Maintain Productivity
Register Now
close-image
Live Webinar : Improve customer experience with Voice Bots
Register Now
close-image
Live Event: Technology Day- Kerala, E- Governance Champions Awards
Register Now
close-image
Virtual Conference : Learn to Automate complex Business Processes
Register Now
close-image
How to drive performance, flexibility & security capabilities across the cloud
Learn More
close-image
We Are Live! Tech Senate 2022 -Learn best practices in choosing emerging technologies
Watch Now
close-image