Hackers Channeling R&D Into Better Malware
IT companies spend billions on R&D to improve their products and take advantage of the latest technologies. But as it turns out, so do cybercriminals, and that strategy seems to be working pretty well.
Cloud computing, search engine optimization and security exploit frameworks are all examples of tools that can help both legitimate companies and hackers conduct their business more effectively, security researchers said Tuesday in a panel discussion at RSA 2010 in San Francisco.
Metasploit, the open-source penetration testing framework bought by Rapid7 last year, was originally created as an exploitation framework but is quickly morphing into a general purpose attack suite, according to Ed Skoudis, vice president of security strategy for Predictive Systems.