Elbit unit CYBERBIT uncovers bank theft malware

Elbit Systems training simulator

Israeli autonomous frontend co AutonomyAI raises $4m

Dridex malware is said to be responsible for the theft of over $50 million, including $30 million from UK accounts alone.

Elbit Systems Ltd. (Nasdaq: ESLT; TASE: ESLT) cyber security unit CYBERBIT announced today that it uncovered for the first time, the Dridex malware’s advanced and sophisticated persistency mechanism, allowing organizations to detect and remove the malware.

Elbit Systems unit wins Asian cyber security deal

Elbit cyber security unit wins Swiss simulator deal

Elbit Systems cyber security unit wins two contracts

Elbit Systems reports higher Q2 revenue and profit

The unique analysis was revealed by CYBERBIT’s malware research expert team, who managed to conduct a detailed dynamic behavioral analysis of the Dridex malware, fully revealing its infection process and persistency mechanism. Part of Dridex’ robustness is attributed to its ability to constantly generate new variants for each attack, thus going undetected under AV engines. CYBERBIT’s malware research team, a group of specialists who analyze malwares and security threats in order to enrich CYBERBIT’s analyses methods and algorithms, managed to reveal Dridex’ persistency mechanism, which allows it to remain uncovered and undetected due to its unique mode of operation.

Since its appearance in late 2014, Dridex has been one of the most notable malware threats, designed to steal personal banking information and credentials mostly from small and medium-sized organizations. Dridex malware attacks are said to be responsible for the theft of over $50 million, out of which $30 million was stolen from UK accounts alone. The criminal forces behind Dridex are believed to have links to similar cybercrime gangs. CYBERBIT suspects that such criminal organizations experience from previous activities are those that allow Dridex authors and affiliates to keep their infrastructure alive and to stay active and dangerous.

CYBERBIT will present and demonstrate its detection of advanced threats capabilities at the CYBERTECH 2016 Exhibition (booth F), January 26-27, 2016 at the Israel Trade Fair and Convention Center.

CYBERBIT’s products collect and analyze information in greater depth and context over time and space and provide ad-hoc forensics and response capabilities, for both IT and SCADA networks, while assuring minimum time for mitigation, remediation and response. CYBERBIT’s technology is developed by skilled personnel, and it supplies live hands-on training that keeps its customers efficient and savvy.

Published by Globes [online], Israel business news - www.globes-online.com - on January 25, 2016