Combating Malware Requires a New Way of Thinking

Nat Kausik

Malware in the Cloud

It’s no secret that cloud adoption has exploded in the enterprise over last few years. However, this aggressive cloud adoption trend has also opened the floodgates for a host of new threats and elevated the risk of data being lost or stolen. Perhaps not surprisingly, malware and ransomware in the cloud – longtime challenges for endpoints – top the list of the most prominent threats facing enterprises investing in the cloud. Additionally, with increased reliance on widely used interconnected public cloud apps in the enterprise, malware and ransomware have the potential to touch – and compromise – more data than ever before.

Yet, despite new and increasing risks to data, few providers offer dedicated cloud malware protection. While some cloud apps like G Suite, office 365, and Azure can identify common malware, such solutions are completely ineffective in combatting zero-day attacks when end-users need instant access to data in the cloud or expect an instant upload of a file.

The lack of proactive cloud Malware solutions underscores an industry gap that indicates – among other things – organizations are unprepared and under-equipped to effectively address next-generation AI-based malware. The most dangerous threats aren’t known malware, but the unknown, zero-day attacks that fly under the radar of security defenses and result in weeks or months of data exfiltration – often at a major cost to the targeted organization. Once advanced malware makes its way into a cloud app, there’s little an organization can do to stop its spread. These malicious files are often downloaded to endpoints, make their way to connected apps, and are then shared across the organization.

cloud malware

Here are a few steps organizations can take to solidify malware defenses in the cloud and keep sensitive data from falling into the wrong hands.

Rethink the Security of Enterprise Apps:

G Suite and Office 365 are perhaps the most trusted of any enterprise apps. Unlike random online video content and unfamiliar internet games, enterprise apps are supposed to be functional and secure, and their files are expected to be free of malware. Consequently, most people don’t think twice about downloading corporate documents or attachments. Unfortunately for the end user, cyber criminals will happily capitalize and exploit this trust. Unbeknownst to many, enterprise apps contain the same flaws as any others, and don’t come with built-in security protections. So, there is strong likelihood that they’re hosting malware just like any other app.

Find a Trusted Third Party Endpoint Security Solution:

Major cloud providers such as Salesforce and Box all work with third-party security solutions. Because most cloud platforms don’t come equipped with advanced threat protection, third-party solutions are a must. Not all endpoint security solutions are the same, so it is recommended that you stack up endpoint protection to the best possible standards. Top solutions will catch most malware coming to endpoints, which includes both desktops and laptops. For today’s threats and IT structure, organizations will need a solution that works across applications, as opposed to a solution that only works on one or a few apps.

Stop Malware from Spreading:

One of the ways to protect data from the threat of malware is to prevent it from spreading. Advanced Threat Protection (ATP) technologies allow organizations to detect and block known and unknown malware before it hits the cloud, assess the risks of files, and stop malicious attacks in their tracks.

Implement Dedicated Mobile Device Protection for BYOD:

If you don’t see mobile protection incorporated in lists of enterprises’ endpoint features, there’s a distinct reason: it’s not their bread and butter. Endpoint security does a good job of securing infrastructure and identifying bad files, but falls short when protecting the end users or providing secure access of that file – especially as more users rely on unmanaged personal devices to conduct business functions. Organizations need mobile-specific security solutions that work seamlessly across all apps, provide a frictionless user experience, secure corporate data, and ensure regulatory compliance requirements are met.

Invest in Zero-Day Protection:

As malware becomes increasingly stealthy, sophisticated, and elusive, organizations need to get a few steps ahead of potential attacks with zero-day protection that can address both known and unknown threats. That means steering clear of solutions that protect solely with signature-based technology and block only known threats. On the other hand, next-generation tools combat advanced threats with static analysis, basing a risk decision on hundreds of characteristics associated with a file. They can then identify the threat based on its behaviors, even before it has been found in the wild.

By Nat Kausik

David Friend

Tech Evolution – Why Multi-Cloud Will Win

Why Multi-Cloud Will Win When I was growing up in the 1970’s, IBM ruled the roost in corporate data centers. If you walked into a ...
Machine

Machine Learning: The Importance of Actionable Data

The Importance of Actionable Data How awesome would it be to know for sure exactly what your customers want to see from your business? Imagine ...
Sebastian Grady

Digital Transformation – Updated Metrics for the Cloud Era

Cloud Era Metrics Undertaking digital transformation means also transforming how IT success is defined, including metrics that address business in the cloud.  With up to ...
Hacker Cloud

Pandemic and Cybersecurity: Top Threats to Businesses

Pandemic and Cybersecurity The worldwide spread of the COVID-19 virus is coming to naught (or at least we hope so). But the impact that this ...
Atman Rathod

How APIs and Machine Learning are Evolving? 

Machine Learning Continues to Make API Development Better  For any developer, API or Application Programming Interfaces come as the helpful components to add valuable features ...
Robert Van Der Meulen

Focusing on Online Gaming Security During Development

Online Gaming Security Infrastructure Updated article: June 2nd, 2020 There are millions of gamers around the globe and as of 2018, video games generated sales ...
Data Fallout.png