New Malware Breaks 'Impenetrable' Corporate Defenses, Strikes First In Philippines

Quick Heal Technologies has discovered a new form of malware that can bypass sandbox-based gateway appliances. Image: IB Times / Reuters

An antivirus firm has uncovered a new strain of malware that can break through highly secure enterprise networks. This malware is capable of getting past sandbox-based gateway appliances, sold by companies like Fireeye and Fortinet, to land in unsuspecting email inboxes. Its discovery by security firm Quick Heal Technologies is set to kickstart a cat-and-mouse game between appliance vendors and malware makers.

That's bad news for companies depending solely on these appliances to keep their network secure. These solutions can run up to $500,000, and have so far been impenetrable. Farokh Karani, a director at Quick Heal, explained that these appliances are a new trend in a world looking to find the one solution to all security problems. "The latest magic bullet being touted is these sandboxing appliances," he said.

These appliances run virtual machines (VMs) with a variety of different browsers, operating systems, and configurations. VMs are sometimes used by consumers with apps like Parallels to run Mac on Windows. In this situation, VMs are used when an email arrives at the company. The appliance executes the code in these VMs to make sure there's nothing nasty hiding inside.

This new malware, known as APT-QH-4AG15, was able to find its way around the appliance, and analysis reveals that it contained several schemes to get around virtual machines and sandboxes. The malware was first picked up in the Philippines, targeting local financial institutions, but Karani warns that all sandbox-based gateway appliances are effected.

"Our initial findings have taught us that even the most advanced sandbox-based appliance protection can be breached," said Sanjay Katkar, CTO at Quick Heal. "As a result, enterprises need to consider and implement multiple layers of protection to safeguard their networks."

Karani explained that antivirus software inside the network was able to detect the malware, but this spells trouble for companies depending on the appliances for their complete security solution. "It's the flaw in approach of sandboxed appliances, if you're taking it to be the magic bullet to stop all malware from coming in," said Karani.

The reason why these appliances have been secure until now, Karani said, is because malware makers weren't targeting them. Instead, developers focused on attacking traditional servers and PCs, bypassing regular antivirus software.

"The best defense is layers of robust protection – from the network to the endpoints and across all mobile devices, with continuous updates made to ensure that all levels of protection are current," said Karani.

The company's report reveals that the file creation date is just over 10 days old. That means the starting pistol has been fired, appliance developers will need to keep up to date, and the myth that these appliances are a "magic bullet" solution is now suspect. - International Business Times

Continue reading

Silverpack investing ₱500 Million for Philippine plant

In an interview, a Silverpack official said the company plans to conquer Southeast Asia over the next decade through aggressive expansion of its manufacturing facilities and sales office across the region. image: philSTAR

MANILA, Philippines - Multinational packaging firm Silverpack Sdn Bhd is looking to invest ₱500 million to put up its first manufacturing plant in the country in the next two to three years.

In an interview, a Silverpack official said the company plans to conquer Southeast Asia over the next decade through aggressive expansion of its manufacturing facilities and sales office across the region.

"Our plan is to set up manufacturing plants in Asean in 10 years' time. We already have a factory in Malaysia and China. We have sales offices in Singapore, Sri Lanka and Thailand. We also need to set up sales offices in the entire Southeast Asia," Silverpack regional sales director Jeffrey Ng said.

In the Philippines, Ng said the company intends to gather a sizable market share initially before putting up a manufacturing plant in two to three years.

Ng said Silverpack is currently in talks with large food manufacturing companies in the Philippines for the export of its products.

"We are expanding because companies are also expanding. When they do well, we will do well as well," he said.

Silverpack's clients in Philippines are still mostly small and medium enterprises which import about ₱3 million to ₱4 million worth of products a month.

The company is looking to tap large Filipino conglomerates which invest in their own packaging plants for their businesses.

Ng said a candy manufacturer, for instance, spends 10 percent of its total cost for packaging alone while a high value goods manufacturer spends five to seven percent.

Silverpack's packaging materials are used by a wide range of food industries such as coffee, tea, confectionery, milk products, snacks, biscuits, instant food items, oil, seafood, pet food, sweets, jelly top seal, fruit drinks, personal care series, and moon cakes.

The Embassy of Malaysia Trade Office (Matrade) Manila said Silverpack is among the top five packaging companies in Malaysia at present.

Matrade commissioner Nyaee Ayup said Silverpack's expertise in packaging would help support a wide range of food industries in the Philippines.

"Instead of setting up their own packaging division, the food manufacturers in the Philippines can focus on their main line of business, if they will tap Silverpack for their packaging needs," Ayup said. - With Pia Lee Brago @philSTAR

Continue reading