Cybersecurity




/

Invisible Malware Is Here and Your Security Software Can't Catch It

"Invisible malware," a new breed of malware, is on the march and, if it strikes your servers, there may not be much you can do about it. In fact, you may not even be able to tell that it's there. In some cases, invisible malware lives only in memory, meaning there's no file on your disks for your endpoint protection software to find. In other cases, invisible malware may live in your Basic Input/Output System (BIOS) where it can use one of a few tactics to attack you. In some cases, it may even appear as a firmware update where it replaces your existing firmware with a version that's infected and nearly impossible to find or remove.
"With the advancement in anti-malware and Endpoint Detection and Response (EDR) software making it easier to catch zero-day malware, the malware writers are moving lower on the stack," said Alissa Knight, a senior analyst with Aite Group's cybersecurity practice. She specializes in hardware-based threats. Knight said this new type of malware is being developed that can evade detection by legacy software.