Forest Global Training Partners

Cyber Risks · Cisco Talos

Virus Bulletin Publication And Presentation

Summary: Cisco Talos researchers Warren Mercer and Paul Rascagneres presented at the Virus Bulletin conference in Madrid in October on reconnaissance techniques used by APT actors. Their talk showed how the reconnaissance phase is executed as part of the infection process to protect valuable zero-day exploits, malware frameworks, and other tools, and accompanies a paper titled "Modern reconnaissance phase by APT – protection layer" now public on the Virus Bulletin website.

What you should know: The research frames reconnaissance as a deliberate shield for zero-day exploits and malware frameworks, meaning the scanning and probing an APT does before an intrusion is itself the mechanism that keeps its most valuable tools intact and unexposed.

Read the original at Cisco Talos ↗

Topics
Malware
Related