FireEye Resources - Security Vault

The FireEye Security Vault is an online resource to learn about modern malware and the threat it poses to today's networked organizations. Learn about the evolution of malware, botnet basics, as well as advanced evasion and obfuscation used by malware to bypass legacy security technologies.

Conventional security mechanisms are well understood by criminals that build Modern Malware to circumvent network and host security mechanisms.  For example, Web malware uses code obfuscation to avoid detection by signature-based technologies. The malware is injected into iFrames to hide malicious content on everyday Web sites and ads. Conventional security solutions are obsolete when it comes to Modern Malware, Trojans, rootkits, and bots that have advanced substantially in technological sophistication.   

Modern Stealth Malware

IT administrators and researchers are witnessing a rapid rise in malware that exploits browsers and operating systems. Web-based malware use techniques like obfuscated JavaScript to easily circumvent traditional security measures like antivirus, firewalls, IDS/IPS, and URL filtering.

Infected computers act as backdoors into the network allowing unauthorized remote access to criminals who exploit valuable data and PC resources for cybercrime. Typical under-the- radar thefts include user credentials, intellectual property, credit card data, and much more. The hard costs associated with data destruction, IP loss, PC remediation, and customer notifications are substantial. The FBI estimates costs to companies and consumers at over US$100 billion annually.