Advanced volatile threat
Advanced Volatile Threats (AVT) are an advanced kind of cyberattack where the malicious code does not need to reach its victim's hard drive in order to deliver its payload.[1]
Traditional antivirus solutions depend on the presence of a file on the hard drive. That particularity makes this attack more potent than the related advanced persistent threat.[2]
Term
The term Advanced Volatile Threats began being used publicly[3] following the release of a report by security firm Mandiant detailing the activity of APT1. The term "AVT" was coined by Triumfant CEO John Prisco.[4] Another example of this type of malware is CDorked.A, whose configuration data is held entirely in RAM and is never written to the hard drive.[5] Yet another example of this popular attack is the Hetzner case, when a popular hosting company was compromised using the same techniques.[6][7]
References
- ↑ http://www.usatoday.com/story/tech/2013/02/21/advanced-volatile-threat-malicious-software-pc-intrusions/1933975/
- ↑ https://www.networkworld.com/news/2013/022113-advanced-volatile-threat-new-name-266931.html
- ↑ http://www.darkreading.com/vulnerability/move-over-apts-the-ram-based-advanced/240149192
- ↑ http://www.usatoday.com/story/tech/2013/02/21/advanced-volatile-threat-malicious-software-pc-intrusions/1933975
- ↑ http://www.usatoday.com/story/tech/2013/05/02/cybersecurity-advanced-malware-apache-webserver/2127627/
- ↑ http://www.heise.de/newsticker/meldung/Hetzner-gehackt-Kundendaten-kopiert-1884180.html
- ↑ Fabian Scherschel (7 June 2013). "Hetzner web hosting service hacked, customer data copied". The H.
http://www.csoonline.com/article/729258/advanced-volatile-threat-new-name-for-old-malware-technique-