Solutions
Intercepting distribution by substituting the dataset
Data-Swapjack
We replace the victim data exfiltrated to the C&C server with a decoy dataset, so that the attacker ends up distributing data we have taken over.-
- How does it work?
- Data-Swapjack inserts a decoy dataset onto the server to nullify the attacker's distribution of victim data uploaded by the malicious app,
swapping it for the real dataset and deceiving the attacker.
-
- What makes it different?
- Most security solutions stop at telling you to remove the malicious app from the affected device.
Data-Swapjack instead protects the data by altering and intercepting it.
The core of this solution is that it is designed to prevent real harm even when the data has already been exfiltrated to the attacker's server.
-
- Even stronger together with Deep-Coding
- Data-Swapjack works with Deep-Coding to analyze the malicious app and break its defenses so the solution can be applied.
Once we know what information the app steals, we compose the optimal decoy data.
Active defense — not passive reaction — keeps the damage to a minimum.
