Following news that threat analysts have discovered ten malicious Python packages on the PyPI repository, used to infect developer's systems with password-stealing malware (10 malicious PyPI packages found stealing developer's credentials (bleepingcomputer.com)), Henning Horst, Chief Technology Officer at comforte AG, explains the risks of password-stealing malware:
Malware is a common tool threat actors use to steal credentials and sensitive information. There is a broad range of malware families out there that do everything from secretly capturing users' movements to locking up systems. Organizations must mitigate such risks through constant backup to ensure data can be restored rapidly if it is locked, and also utilize proven data-centric security to foil the attack itself. If data is neutralized using modern data-centric techniques – such as tokenization or format-preserving encryption - that enable data use and data analytics in the enterprise while protected while restricting access to the minimum live data, attackers will get the equivalent of digital coal, not data gold.
- EXPERTS COMMENTS
- Talking Point
- Posted On
