As technology advances, so too do cybersecurity threats, and a new point of vulnerability for companies could be remote access tools.
Nader Zaveri (pictured), senior manager of Mandiant incident response and remediation at Google Cloud, estimates that 10% of the company’s investigations involved remote management tool abuse last year and anticipates further growth.
“We are starting to see threat actors utilize what we call remote access tools, RATs, or the industry properly terms them remote monitoring and management tools,” Zaveri said. “Threat actors are basically utilizing those tools to maintain persistence in organizations during their attacks and are able to laterally move throughout the environment. So, they’re just piggybacking off of already existing tool sets in the environment or just going inside and downloading their own thing. So, we want to call that out and highlight it because we’re starting to see it all over.”
Zaveri spoke with theCUBE Research’s John Furrier and Savannah Peterson at mWISE 2024, …