Malware Defenses

Why Is This Control Critical?

Malicious software (sometimes categorized as viruses, worms, Trojans, ransomware, spyware, adware, etc.) is an integral and dangerous aspect of internet threats. It can have many purposes, from capturing credentials, stealing data, identifying other targets within the network, and encrypting or destroying data. Malware is ever-evolving and adaptive, as modern variants leverage machine learning techniques. Malware enters an enterprise through vulnerabilities within the enterprise on end-user devices, email attachments, web pages, cloud services, mobile devices, and removable media. Malware often relies on insecure end-user behavior and social engineering to gain initial access, emphasizing the importance of security awareness training.