By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
TechgoonduTechgoonduTechgoondu
  • Audio-visual
  • Enterprise
    • Software
    • Cybersecurity
  • Gaming
  • Imaging
  • Internet
  • Media
  • Mobile
    • Cellphones
    • Tablets
  • PC
  • Telecom
Search
© 2023 Goondu Media Pte Ltd. All Rights Reserved.
Reading: A quarter of malware now uses encryption to bypass defences: Sophos
Share
Font ResizerAa
TechgoonduTechgoondu
Font ResizerAa
  • Audio-visual
  • Enterprise
  • Gaming
  • Imaging
  • Internet
  • Media
  • Mobile
  • PC
  • Telecom
Search
  • Audio-visual
  • Enterprise
    • Software
    • Cybersecurity
  • Gaming
  • Imaging
  • Internet
  • Media
  • Mobile
    • Cellphones
    • Tablets
  • PC
  • Telecom
Follow US
© 2023 Goondu Media Pte Ltd. All Rights Reserved.
Techgoondu > Blog > Enterprise > A quarter of malware now uses encryption to bypass defences: Sophos
EnterpriseInternetSoftware

A quarter of malware now uses encryption to bypass defences: Sophos

Alfred Siew
Last updated: August 13, 2020 at 6:55 PM
Alfred Siew
Published: February 27, 2020
2 Min Read
SHARE
PHOTO: Lewis Ngugi from Pexels

Hackers are encrypting their malicious code to hide from cyber defences and trick unsuspecting users into running the malware, according to cybersecurity firm Sophos.

Twenty-three per cent of malware families use encrypted communications to hide from, say, firewalls that look out for them, it said last week in a report.

It added that 44 per cent of prevalent information theft uses encryption to sneak hijacked data, including bank and financial account passwords and other sensitive credentials, from victims.

The hackers often use the common TLS or transport layer security (TLS) encryption standard that is also used by legitimate traffic that users rely on to keep data from prying eyes.

Unfortunately, this means firewalls often don’t inspect the malicious code that is also hidden within TLS encryption. They get a free ride through cyber defences, as a result.

Another issue is the cost and performance hit that firewalls have to take if they were required to inspect the data that is encrypted by TLS. If this inspection takes up too much time, users will be inconvenienced.

There are also questions of privacy and data protection. Encryption, after all, is meant to keep data secure from unauthorised access. The question now is how to identify the malware hiding itself under a layer of encryption.

Sophos claims its new firewalls are capable of decrypting TLS traffic while keeping performance up, thanks to the use of technologies such as artificial intelligence (AI).

This is a problem that is not properly addressed yet, it added. While 82 percent cent of respondents it surveyed agreed that TLS inspection is necessary, only 3.5 per cent of organisations are decrypting their traffic to properly inspect it.

The future of Java
Q&A: Finding a new way to learn online in a post-pandemic world
Experts: regulation needed to secure Internet of Things
YOG social media initiatives don’t get enough love
Pay for McDonald’s with Visa payWave in Singapore
TAGGED:encryptionfirewallmalwareSophosTLSTLS inspection

Sign up for the TG newsletter

Never miss anything again. Get the latest news and analysis in your inbox.

By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Whatsapp Whatsapp LinkedIn Copy Link Print
Avatar photo
ByAlfred Siew
Follow:
Alfred is a writer, speaker and media instructor who has covered the telecom, media and technology scene for more than 20 years. Previously the technology correspondent for The Straits Times, he now edits the Techgoondu.com blog and runs his own technology and media consultancy.
Previous Article Goondu DIY: Avoiding those annoying ads you see on Facebook
Next Article Philips offers another high-end TV option in Singapore with its OLED+ 984
Leave a Comment

Leave a ReplyCancel reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Stay Connected

FacebookLike
XFollow

Latest News

Q&A: Digital trust is eroding and businesses need to rebuild, says Thales
Cybersecurity Enterprise Internet
May 28, 2025
Dell pitches next-gen infrastructure technologies to power AI for businesses
Enterprise
May 27, 2025
Building a PC? Fancy wood, video screens and retro beige plastic?
Gaming PC
May 27, 2025
Hands on: DJI Mavic 4 Pro redesign expands creative options
Imaging
May 26, 2025

Techgoondu.com is published by Goondu Media Pte Ltd, a company registered and based in Singapore.

.

Started in June 2008 by technology journalists and ex-journalists in Singapore who share a common love for all things geeky and digital, the site now includes segments on personal computing, enterprise IT and Internet culture.

banner banner
Everyday DIY
PC needs fixing? Get your hands on with the latest tech tips
READ ON
banner banner
Leaders Q&A
What tomorrow looks like to those at the leading edge today
FIND OUT
banner banner
Advertise with us
Discover unique access and impact with TG custom content
SHOW ME

 

 

POWERED BY READYSPACE
The Techgoondu website is powered by and managed by Readyspace Web Hosting.

TechgoonduTechgoondu
© 2024 Goondu Media Pte Ltd. All Rights Reserved | Privacy | Terms of Use | Advertise | About Us | Contact
Join Us!
Never miss anything again. Get the latest news and analysis in your inbox.

Zero spam, Unsubscribe at any time.
 

Loading Comments...
 

    Welcome Back!

    Sign in to your account

    Username or Email Address
    Password

    Lost your password?