Hackers latest tactic involves a malware-free attack using a company's own system credentials and admin tools to gain access.
Organizations should be on the alert for adversaries attempting to breach their computer systems by using little or no malware in their attacks, warns Dell SecureWorks’ Counter Threat Unit (CTU) senior researcher Phil Burdette.
According Burdette, cyber criminals are using the target company’s own system credentials and legitimate software administration tools to move freely throughout their network, infecting and collecting valuable data. Burdette, who is part of the CTU operations team, says this has been the method to gain access to networks in nearly all of the intrusions responded to by the Incident Response Team over the past year.
The CTU has coined this tactic: living off the land.