Legitimate Tools Became Attack Tools

A ransomware attack against a hospital was stopped after attackers attempted to install three legitimate remote-access tools. The tools themselves weren't malware, but they were being used as part of the attack chain.

Stopping the ransomware payload wasn't what prevented the attack. Blocking the tools attackers needed to gain access stopped the attack earlier in the chain.

How much attention should organizations give legitimate software that attackers can repurpose?

Subscribe to our podcasts: https://securityweekly.com/subscribe

#Ransomware #RemoteAccess #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec