![\"fileless](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2018\/03\/Dark-web-mod.jpg\")
<\/p>\n<\/p>\n
If you were to interview the man or woman on the street and ask them to define cybersecurity, a few things might spring from their lips. \u201cCybersecurity stops Russian hackers\u201d may be one given the current political climate, but another less controversial statement might be \u201ccybersecurity stops malware.\u201d This statement should be no surprise\u2014from the earliest days of endpoint security, stopping malware was solutions providers\u2019 top priority. It\u2019s the most recognized digital threat, and perhaps the most persistent in the history of computers. <\/span><\/p>\n Yet, as we here at Solutions Review are fond of saying, those simple days of endpoint security<\/a> are over. Identity is taking more center stage in the popular understanding of cybersecurity, and a new threat is taking malware\u2019s place in the nightmares of IT security experts: fileless malware<\/a>. <\/span><\/p>\n What is fileless malware? Why should your enterprise be concerned? Here\u2019s what you need to know: <\/span><\/p>\n Malware can refer to any sort of malicious software, but it is most commonly understood as a digital infection initiated via a downloaded file onto a victim\u2019s server. A fileless malware attack is still malicious and often has the same goals as normal malware\u2014steal enterprise data, disrupt business processes, take control of endpoints, conduct basic digital infiltration, etc.\u2014but crucially does not involve downloading files of any sort. <\/span><\/p>\n Fileless malware instead exploits applications, software, or programs that an end-user would utilize in their day-to-day activities such as Flash Player. As a result, fileless malware is sometimes referred to as \u201cliving off the land\u201d attacks. You can also consider it a non-malware attack, as it doesn\u2019t truly function as a normal malware attack would. <\/span><\/p>\n Massachusetts-based endpoint security solution provider <\/span>Carbon Black<\/span><\/a> provides an excellent example of how fileless malware works in their recently released \u201cModern Bank Heists: Cyberattacks & Lateral Movement in the Financial Sector\u201d <\/span>report<\/span><\/a>. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n To summarize: via a phishing attack, the hacker leads the user to a malicious website which runs Flash Player and thus Powershell. Powershell is an operating system tool embedded in all Windows endpoints. Powershell runs on memory alone, and not on files. The fileless malware will then run a stealth command on Powershell, forcing it to run a script that fulfills the hacker\u2019s malicious objectives such as stealing data. The fileless malware then closes off the connection and leaves no trace of itself behind. <\/span><\/p>\n Incidentally, Powershell is the most common fileless malware attack vector according to Carbon Black, constituting 89% of these attacks. <\/span><\/p>\n Carbon Black noted that fileless malware attacks now account for more than 50% of successful enterprise breaches. According to their report, 97% of their customers have experienced a fileless malware attack over the past two years. Fileless malware can allow hackers to move laterally throughout your enterprise and its endpoints undetected, granting threat actors \u201cexecution freedom\u201d to paraphrase Carbon Black. <\/span><\/p>\n And there lies the rub: traditional and legacy endpoint security solutions are functionally incapable of even detecting fileless malware attacks, much less preventing them. Legacy solutions<\/a> rely on signature-based detection and scans for malicious files to detect threats\u2014neither of which are applicable to fileless malware. <\/span><\/p>\n Hackers have caught onto this fact, and the fact that plenty of enterprises haven\u2019t updated their endpoint security solutions. Thus stems the proliferation of this new wave of digital threats.<\/span><\/p>\n It\u2019s time to seriously examine your enterprise\u2019s endpoint security solution. When was the last time it was updated? When was the last time the vendor updated it? \u00a0<\/span><\/p>\n If the answer to these questions is of a significant length, then it is time for an upgrade. Your enterprise needs to embrace a new, modern, next-generation endpoint security solution capable of detecting a fileless malware attack before it happens and prevent it. <\/span><\/p>\n We\u2019re living in a very different cybersecurity world than the one of only a few years ago. If your endpoint security hasn\u2019t kept up with the changing times, you virtually have no security at all. It\u2019s time to embrace endpoint security innovation before your enterprise is targeted. <\/span><\/p>\n Don\u2019t allow this new threat to bully your enterprise. Stand up for your employees, your customers, and yourself. \u00a0<\/span><\/p>\n If you were to interview the man or woman on the street and ask them to define cybersecurity, a few things might spring from their lips. \u201cCybersecurity stops Russian hackers\u201d may be one given the current political climate, but another less controversial statement might be \u201ccybersecurity stops malware.\u201d This statement should be no surprise\u2014from the […]<\/p>\n","protected":false},"author":41,"featured_media":1178,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2],"tags":[31,162,75,22,13,30,161,94,84],"acf":[],"yoast_head":"\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2019\/01\/endpoint-security-speedbump-cta.jpg\")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\u00a0<\/span><\/p>\nWhat is Fileless Malware?<\/b><\/h3>\n
How Does Fileless Malware Work? <\/b><\/h3>\n
Why Should My Enterprise Be Concerned? <\/b><\/h3>\n
What Can My Enterprise Do? <\/b><\/h3>\n
\t\t\tGartner MQ for Endpoint Protection Platforms: What’s Changed?<\/a><\/strong>![\"Solutions](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2018\/03\/123-e1522249821940.png\")
<\/a><\/div><\/p>\nGARTNER: Magic Quadrant for Endpoint Protection Platforms<\/a>
\n<\/strong>![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/06\/Gartner-IDaaS-Magic-Quadrant.png\")
<\/a><\/div><\/p>\n
\n<\/a>![\"\"](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2018\/03\/2018-endpoint-security-buyers-guide-clip-art.png\")
<\/a><\/div><\/div><\/div>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"