BAI Security Compromise Assessment Archives - Page 2 of 2

Attack

Huge Development In Cyber Espionage Tech

The United States has reportedly managed to develop a method that allows it to permanently embed surveillance and malware tools in computers and networks around the world, according to Kaspersky Lab, a Russian cybersecurity firm. Kaspersky presented its research at a conference in Mexico Monday night. They have dubbed the creators of this technique the “Equation Group,” and have broadly hinted that it is tied to the U.S National Security Agency and its military partner, United States Cyber Command, due in part to a similarity between Stuxnet – the computer worm that disabled about 1,000 centrifuges in Iran’s nuclear enrichment program – and the new malware platform. But the Equation’s level of sophistication makes Stuxnet seem like child play, according

BAI Security February 19, 2015

BAI Security Compromise Assessment

The Great (Digital) Bank Robbery: Protect your network from “Carbanak” Malware

More details are emerging on the international cybercrime ring based out of Eastern Europe who made off with some $1 billion in two years from 100 different banks in nearly 30 countries. Their main attack venue was spearphishing emails with a CPL or Word document attachment, sent to employees of financial firms and retail organizations. Computers were then infected with a Trojan backdoor that collects data, and provides remote access to the machines. The code used in the malware was digitally signed and appeared to many vulnerability scanners to be legitimate code. In some cases, the vulnerabilities exploited were in Microsoft Office software, rather than in the operating system itself. Apparently some of the companies who were hacked were updating

BAI Security February 23, 2015

BAI Security Audit

BAI Security: “Most Promising Enterprise Security Companies”

BAI Security is pleased and proud to announce that we have been included in the CIO Review Enterprise Security list of the “20 Most Promising Enterprise Security Companies.” The companies included in this year’s list were selected by a panel of CIOs and CEOs of public companies, analysts, and the CIO Review editorial board. The list highlights a select group of companies that “provide uniquely effective approaches to enterprise security threats.” CIO’s write-up also states that it “believes these companies have achieved significant momentum and will rise above the rest.” So you can see why we’re so pleased to be included. In CIO Review’s article on BAI Security, we were (correctly!) described as a “singularly-focused IT Security and Compliance firm

BAI Security March 3, 2015