IBM has is warning customers to destroy Storwize USB sticks that were shipped with North Korea-linked malware used to spy on users. Michael Patterson, CEO of Plixer International is commented below.
Michael Patterson, CEO at Plixer International:
“Over 20% of breaches were related to espionage in 2016 and this is one way of embedding it through third party manufacturers. The right intellectual property (IP) can provide a significant competitive edge as knowledge is power. That is why all equipment coming into a corporate environment should be vetted before being connected to a network. If embedded malware is missed, then outbound connections can be monitored by using network traffic analytics which can be used to uncover these malicious reconnaissance efforts. Low and slow data exfiltration is difficult to uncover and requires flow monitoring for unwanted traffic patterns over a period of time rather than a few minutes.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.