Analysis of Poison Ivy remote access tool

A new FireEye report highlights the resurgence of Poison Ivy, a malware Remote Access Tool (RAT) that has remained popular and effective eight years after its original release – attacking dozens of Fortune 1000 firms.

In conjunction with the research, FireEye is also releasing Calamine, a set of free tools to help organizations detect possible Poison Ivy infections.

“Remote access tools may be the hacker’s equivalent of training wheels,” said Darien Kindlund, manager of threat intelligence at FireEye. “But dismissing this common breed of malware could be a costly mistake. Despite their reputation as a software toy for novice attackers — RATs remain a linchpin of many sophisticated cyber attacks and are used by numerous threat actors. Today, we see hundreds of attacks using Poison Ivy targeting very high profile enterprises.”

SOURCE: net-security.org