These days, malicious actors succeed not by breaking systems, but by blending into them. Increasingly, the intruder looks like a legitimate workload. The alarm doesn’t ring, until it’s too late.
Take, for instance, the recently identified RustyWater implant associated with the Muddy Water advanced persistent threat. After RustyWater enters a system, it persists quietly. It avoids the obvious paths for escalating the threat, and keeps its interactions to a minimum, the better to stay undetected. It doesn’t generate noticeable side…
