Viruses, trojans and worms are going into stealth mode.
A recent study by security vendor Finjan has found a new type of attack that researchers say is harder to detect and stop from spreading. They’re called “evasive attacks,” and here’s how they work: They keep track of the IP addresses of visitors to an infected Web page, and only expose users to the malicious code once. When the user returns to the page, all traces of malicious code are gone. And that reduces the chances of detecting the attack quickly.
Finjan says traditional antivirus products and other security technologies will become less effective as these evasive attacks become more prevalent, and the company recommends new technologies to keep the threats from getting to that point. The study, of course, highlights Finjan’s technology that scans code in real time and prevents the attacks from launching in the first place.