Threat Actors Exploiting Legitimate Software For Stealthy Cyber Attacks

Commercial Applications, Malicious Operations (CAMO) are becoming more common among attackers, leading to an increase in misuse of legitimate IT tools. CAMO can confuse security personnel, ultimately causing successful cyber attacks and exploits. Organizations are encouraged to undertake measures including policies, controls, and threat detection capabilities to combat this threat. Certain ransomware groups have also been reported to exploit IT tools for malicious purposes. Blocking unauthorized cloud services and restricting RMM tools are suggested as some mitigatory measures.