Cyberwarfare now menacing the enterprise, Kaspersky Lab says
Stuxnet, Flame, Gauss and other state-sponsored cyberwarfare malware is increasingly disrupting operations in organizations
IDG News Service - Enterprise security managers have yet another worry to add to their list: cyberwarfare attacks.
Now, in addition to guarding against targeted attacks from cybercriminals and activists, enterprise security managers must increasingly guard against potential damage from nation-state cyberwarfare as well, according to the head of research from Kaspersky Labs.
"There are actually a lot of cyber weapons [out there now], but they are very hard to discover," said Costin Raiu, Kaspersky Lab's director of global research, who spoke at the Kaspersky Cyber-Security Summit of 2013 Wednesday.
Raiu pointed to how Red October, software that Kaspersky discovered last year, was surreptitiously monitoring computers for at least five years before it was discovered. "This is really shocking for us. We never expected to live in such a stealthy world where we simply don't know how many other similar attacks are out there," Raiu said.
Malicious software from profit-minded cybercriminals still accounts for the majority of malware in circulation today, but malware developed by the military, military contractors or other government agencies is becoming increasingly prevalent as well. Cyberwarfare takes place when one nation deploys malware to disrupt the activities of another nation. Also related is cyberespionage, where malware is planted on computers to spy on governments, corporations and important people.
While an antivirus vendor's warnings about emerging threats can appear to be self-serving, Kaspersky Lab has had a lot of success in the past few years discovering and helping to understand malware supposedly created by governments for purposes of spying and attacking network infrastructure. And Raiu's remarks have already proved to be timely. On Thursday, the New York Times reported that malicious Chinese hackers, using techniques developed by the Chinese military, had infiltrated its computers.
Raiu pointed to recently discovered malware such as Flame, Gauss, Red October and Stuxnet as examples of cyberwarfare malware.
Such cyberwarfare malware can be better-funded, better written and much more difficult to detect and decode than typical malware. "We are now discovering malware that has been active for [as long as] 10 years," Raiu said. "The malware that comes from the nation-state is completely different from what is produced by cybercriminals," he added.
When Kaspersky first unearthed Flame, which it classified as cyberespionage malware, Raiu estimated that, despite the fact it was only 20MB in size, that it would take up to 10 years to truly understand how it works. "No anti-virus company has figured out how Flame works," Raiu said. "There is so much code, so many subroutines, so much obfuscation and encryption that you need a lot of super highly talented people ... to understand what it does."
- The NSA blame game: Singling out RSA diverts attention from others
- Jury still out on FISA court
- Suspected China-based hackers 'Comment Crew' rises again
- Chinese hackers master the art of lying in wait
- Spy court OK'd all U.S. wiretap requests it received in 2012
- Groups denounce FBI plan to require Internet backdoors for wiretaps
- South Korea cyberattacks hold lessons for U.S.
- U.S. military networks not prepared for cyberthreats, report warns
- Return of CISPA: Cybersecurity boon or privacy threat?
- New report says cyberspying group linked to China's army
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The 12 PCI DSS 3.0 requirements addressed by Peer 1 Hosting This handy quick reference outlines the 12 PCI DSS 3.0 requirements, who needs to be compliant and how Alert Logic solutions address the...
- Defense Throughout the Vulnerability Life Cycle This whitepaper provides insight into how to leverage threat and log management technologies to protect your IT assets throughout their vulnerability life cycle.
- Mobile Policy Checklist Here's what to consider when putting together a mobile policy designed to support a highly productive workforce.
- Securing BYOD Mobile computing is becoming so ubiquitous that people no longer bat an eye seeing someone working two devices simultaneously. Individuals and organizations are...
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- Streamline Software Asset Management, Compose a software Management Symphony Keeping track of your organization's software is easy with effective software management solutions from CDW. View the videos in our software solutions channel
- Druva inSync: Endpoint Data Protection & Governance CLICK HERE to watch this video about protecting corporate data on laptops and mobile devices, sponsored by Druva. All Security White Papers | Webcasts