informa
Slideshow

What You Should Know About Grayware (and What to Do About It)

Grayware is a tricky security problem, but there are steps you can take to defend your organization when you recognize the risk.
Grayware May Collect Sensitive Information
Grayware Makes for More Malicious Noise
Grayware May Hide Malware
Grayware May Hide Fake Applications
Grayware May Mess With Browser Functions
Grayware Can Eat Bandwidth
What Can You Do About Grayware?
1/7

Everyone has seen them: applications that come on many new systems offering services with unfamiliar names, or apps that have familiar names but are offered on sites that aren't from their publishers. They're grayware – or "potentially unwanted applications" – and they're an ongoing issue for computer security.

Grayware's nature makes it difficult for organizations to keep it away from their systems. "It's not a technical problem, it’s a classification problem. There is a thin line being malicious or not and the operators play with the line. Which limits what researchers and law enforcement can do," said Vitor Ventura, senior security researcher at Cisco Talos, in an email interview.

Some IT professionals might be tempted to ignore grayware while they focus on more obvious malware and other threats. But there are legitimate reasons not to.

"Oh, it's horrible," says Chet Wisniewski, principal research scientist at Sophos. "Not only are you getting something that's annoying to the user, it's often more than doubling the attack surface of your computer because of the additional amount of Internet-facing code that's often poor quality." That's in addition to the privacy and productivity implications of code that tracks activity and pops up unwanted ads, he says.

IT and security teams need to consider a number of factors about grayware, both in terms of what it is and how to deal with it. Without many automation option to help, response is up to a well-informed staff.

(Image: typographyimages)

 
Next slide
Recommended Reading:

MODULE B: Latest content for DR

High-Profile Breaches Are Shifting Enterprise Security Strategy

Increased media attention is driving changes in enterprise security strategy -- some positive, some negative.

Increased media attention is driving changes in enterprise security strategy -- some positive, some negative.


7 Smart Ways a Security Team Can Win Stakeholder Trust

By demonstrating the following behaviors, security teams can more effectively move their initiatives forward.

By demonstrating the following behaviors, security teams can more effectively move their initiatives forward.



What Are Some Red Flags in a Vendor Security Assessment?

The last thing you want is a vendor that lies to you about its security practices.

The last thing you want is a vendor that lies to you about its security practices.


MacOS Security: What Security Teams Should Know

As more macOS patches emerge and cybercriminals and nation-states take aim at the platform, experts discuss how macOS security has evolved and how businesses can protect employees.

As more macOS patches emerge and cybercriminals and nation-states take aim at the platform, experts discuss how macOS security has evolved and how businesses can protect employees.


Loss of Intellectual Property, Customer Data Pose Greatest Business Risks

The slightly "good" news? Security professionals are a little less concerned about certain threats than last year, according to Dark Reading's "State of Incident Response 2021" report.

The slightly "good" news? Security professionals are a little less concerned about certain threats than last year, according to Dark Reading's "State of Incident Response 2021" report.


Name That Edge Toon: Mobile Monoliths

Feeling creative? Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Feeling creative? Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Oct 04, 2021


Why Windows Print Spooler Remains a Big Attack Target

Despite countless vulnerabilities and exploits, the legacy Windows printing process service continues to be an attack surface in constant need of repair and maintenance, security experts say.

Despite countless vulnerabilities and exploits, the legacy Windows printing process service continues to be an attack surface in constant need of repair and maintenance, security experts say.


10 Recent Examples of How Insider Threats Can Cause Big Breaches and Damage

Theft of intellectual property, sabotage, exposure of sensitive data and more were caused by malicious behavior and negligence at these organizations

Theft of intellectual property, sabotage, exposure of sensitive data and more were caused by malicious behavior and negligence at these organizations