Whatever you want to call it, the bad guys want corporate financial information, customer data, intellectual property, or illegal access to enterprise networks to launch cyber attacks on other organizations. It happened to Google, Adobe, RSA, Lockheed Martin and hundreds of other companies that did not report the incidents. And, for the first time in history, Fortune 500 companies are now listing cyber threats in their SEC filings, alongside other global risks to shareholder value.
Even the leading security suite providers admit that anti-virus solutions are no match for the advanced nature of today's criminal malware.
Professional criminal and state-sponsored organizations invest significant amounts of time and money building logical groupings of compromised systems that are organized around a sophisticated, resilient command-and-control (C&C) infrastructure. These criminal networks are exceptionally stealthy and easily evade signature or behavior-based defenses. They can mimic normal application and traffic patterns and can change their core software far faster than traditional security solutions can update their signature-based systems.
The criminals behind these attacks are serious about making money off their victims over an extended period of time or stealing highly sensitive data such as trade secrets and intellectual property. The goal is not notoriety but ensuring a stable business model for criminal activity.
These attacks go undetected for months, resulting in significant data loss and exposes the organization to legal, financial and brand liability. Damballa detects and terminates this criminal network activity.
Damballa rapidly pinpoints corporate assets under criminal control, terminates the criminal communications and provides all the evidence a security or incident response team needs to prioritize and organize their response.