Attackers altering ways
“Menace actors have discovered that attempting to convey malware [in an initial compromise] is like going to the airport with a bottle of water in your pack — you’re in all probability going to get caught,” Meyers stated in an interview, noting that defensive expertise like endpoint detection and response [EDR] is nice at catching malware. So, he stated, “what’s more and more occurring is menace actors are attempting to maneuver away from being detected [through EDR] and doing it with id. It is a development we’ve seen over the previous two years or so and is actually on the uptick, and is continuous to evolve.”
However, he warned, “multi-factor authentication [MFA] isn’t a silver bullet, and you should have id menace detection and response functionality in your [IT] setting or unhappy issues are going to occur.”
“It’s the outdated [hockey] adage,” he added. “’Skate to the place the puck goes, to not the place it’s at proper now.’”