• Watch
  • Listen
  • Live Stream
Security Weekly
Security Market Validation
  • Listeners
    • Subscribe
    • Insider List
    • Suggest a Guest
  • Shows
    • Paul’s Security Weekly
    • Enterprise Security Weekly
    • Business Security Weekly
    • Application Security Weekly
    • Security & Compliance Weekly
    • Security Weekly News
    • Tradecraft Security Weekly
    • Secure Digital Life
  • Series
    • CISO Stories
    • Getting the Real Work Done in Cybersecurity
  • Webcasts/Trainings
    • Registration
    • On-demand
  • Articles
  • Partners
    • Become a Partner
    • Landing Pages
    • Bookings
      • Approved Interview Form
      • Approved Interview Form – Returning Guest
      • Conference Collection Form
  • Hosts
  • Company
    • About
    • Contact
    • Careers

Articles/ Threat Intelligence/ Threat Modeling

Sophos Releases 2005 Threat Management Report

Paul Asadoorian December 9, 2005

One of the many things I found interesting was this quote:

“…spyware has become one of the biggest threats that businesses now face.”


Hmmm, I wonder how they are defining Spyware? I’ve seen malware, labeled as “Spyware”, that created a backdoor on a users system. I believe that malware is a more appropriate term, and agree that malware on the desktop poses the greatest threat to businesses.
They also list Zafi.D as being the most critical malware threat. It seems to fit the profile of typical malware that we have seen in the past: Spreads through email, adds itself to the system startup in the registry, masks itself as anti-virus software, kills all processes that contain the term “firewall” and “virus”, sets up a backdoor listener, and has the capabilty to update itself.
Whew, I used to say “Glad I run a Mac with OS X”, however Mac users are facing new and uglier threats than ever before (Of course, there is no mention of them in the report). I debated whether or not to post this link (there is no information targeted at “good guys” on this site), however I believe people should know:
http://felinemenace.org/~nemo/
This site contains shellcode, presentations, and exploits targeted specifically at OS X. This is only going to get worse with the switch to Intel, I’m told that shellcode (the bytecode injected into the system once exploited) is easier to write for Intel than for PowerPC. And with Apple potentially gaining more marketshare, they become more of a target.
Sophos Security Threat Management Report 2005
.com

Share this:

  • Click to share on Twitter (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Facebook (Opens in new window)

Related Posts

linux security

Articles /

How to Defend Linux from Attacks

Behavior Detections

Threat Intelligence /

How Behavioral Detections Actually Discovered the SolarWinds Orion SUNBURST Attack

insider

Threat Modeling /

Thwarting the Insider Threat with Network Traffic Analysis

‹ New AIM Worm Socially Engineers Victims › Microsoft revamps browser security zones

About Security Weekly

Security Weekly is the security podcast network for the security community, distributing free podcasts and media since 2005. We connect the security industry and the security community through our security market validation programs.

More Than Just A Sponsor

We view our relationships with the security industry as partnerships, not sponsorships. Security Weekly works closely with each partner to help you achieve your marketing goals and gain traction in the security market. Interested in becoming a partner? Please visit our partnerships page.

Back to Top

Subscribe To The Blog:

RSS Feed RSS - Posts

Search

Follow Us On Twitter

→ Follow Us
© Security Weekly 2021
Powered by WordPress • Themify WordPress Themes