Houdini Malware Used in New Way

guest · Aug 21, 2021

Houdini Malware Used in New Way
Cato Networks: Malware Now Used to Spoof Devices
August 20, 2021
https://www.databreachtoday.com/houdini-malware-used-in-new-way-a-17342

Researchers at SASE platform provider Cato Networks say they have discovered a novel use of the Houdini malware variant for spoofing of devices.

The findings were reported in Cato's second-quarter analysis report, the Cato Networks SASE Threat Research Report Q2-2021. The researchers analyzed 263 billion enterprise network flows between April and June 2021 for the report.
Click to expand...

New Use of Houdini
Spoofing device IDs has been a top priority for attackers, evolving from simple point solutions to cloud-based services, the report says. The Cato Networks research suggests that device identity spoofing threatens to become far more prevalent.

"Houdini is a well-known RAT, but our research shows this particular use is novel. Houdini exfiltrated data within the user agent field, an approach often undetected by legacy security systems. Cato Research Labs only identified such threats by cross-correlating security and network information," the report says.
While the malware, and its worm-like spreading mechanism, is not a new threat, its new capabilities illustrate the lengths malware writers will go to when attempting to remain hidden from point solutions, the report says.
Click to expand...

While device ID spoofing has been around for a while, malware developers are upping their game, says Etay Maor, senior director security strategy at Cato Networks.

"With 'trust adoption' growing constantly, and contextual authentication being part of a ZTNA, attackers are making sure they find new ways to circumvent these security solutions, and Houdini is proof of that," he says.
Click to expand...

Cato Networks: Attackers are Zeroing in On Trust with New Device ID Twist

The cat-and-mouse game between threat actors and security researchers is ever-evolving. With every new threat comes a security solution that in turn triggers the threat’s evolution. It’s an ongoing process whose most recent twist in the Device ID game was documented in our just-released SASE report on enterprise security.
Click to expand...

Log in or Sign up

Houdini Malware Used in New Way

guest Guest

Log in or Sign up

Houdini Malware Used in New Way

guest Guest

Useful Searches