Once an attacker gains initial access to a network, they can employ lateral movement to wander around the network in pursuit of sensitive data. Latitudinally moving from one system to another is a frequent way to spread malware.<\/p>\n\n\n\n
First, a system within the network must be accessed by the attacker. There are several ways to accomplish this, including phishing, taking advantage of security holes, and utilising credentials that have been stolen.
Once inside, the attacker does internal reconnaissance to learn about the architecture of the network and locate possible targets. They might use built-in resources like Netstat, IPConfig\/IFConfig, ARP cache, and Local Routing table.<\/p>\n\n\n\n
Malware is subsequently disseminated to further networked systems by the attacker. They might employ open-source tools like Metasploit and built-in system utilities like \"at\" PsExec, VBScript, and Remote Desktop Protocol (RDP). For example, utility programs like \"at\" might not be installed by default. Attackers can install it using the Linux package manager if it isn't installed.<\/p>\n\n\n\n
Malicious actions, such as remote control over the compromised machine, data theft, and other activities, can all be planned into the malware. Even when their actions are noticed, the attacker frequently wants to stay active within the network. This can be done by installing backdoors for future access or infecting many devices. It's crucial to remember that even while lateral movement may involve some automation, it frequently involves physical labour under the supervision of an attacker or group of attackers. Attackers can immediately respond to security countermeasures implemented by network and security managers and customise their approaches to the specific network in question thanks to this hands-on approach.<\/p>\n","protected":false},"excerpt":{"rendered":"
Once an attacker gains initial access to a network, they can employ lateral movement to wander around the network in pursuit of sensitive data. Latitudinally moving from one system to another is a frequent way to spread malware. First, a system within the network must be accessed by the attacker. There are several ways to … Continue reading “Malware Propagation”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"footnotes":""},"class_list":["post-1812","glossary","type-glossary","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/gabey.com.au\/gabeyinfo\/index.php\/wp-json\/wp\/v2\/glossary\/1812","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gabey.com.au\/gabeyinfo\/index.php\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/gabey.com.au\/gabeyinfo\/index.php\/wp-json\/wp\/v2\/types\/glossary"}],"author":[{"embeddable":true,"href":"https:\/\/gabey.com.au\/gabeyinfo\/index.php\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":0,"href":"https:\/\/gabey.com.au\/gabeyinfo\/index.php\/wp-json\/wp\/v2\/glossary\/1812\/revisions"}],"wp:attachment":[{"href":"https:\/\/gabey.com.au\/gabeyinfo\/index.php\/wp-json\/wp\/v2\/media?parent=1812"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}