Backdoor factory: Is Malware Hiding Inside your Applications?

Backdoor Factory: Is there malware hidden inside your applications?

Most users are allowed to have administrative privileges that enable them to download and install applications from the web. This makes it very easy for attackers to plant hidden malware and compromise devices. One of the tools that are being used to do this is called Backdoor factory, and the reason for its popularity is it able of maintaining the size of the file while still keeping the full executable functionality.

The SentinelOne agent provides several ways of preventing and mitigating such attack flows, both on Windows and macOS. On this demo, you can see how SentinelOne agent is mitigating it pre-execution using 2.1 version.
For this demo, we used process explorer (Microsoft file) that was manipulated by Backdoor Factory to include a malicious code.

Want to learn more about SentinelOne?
Request a demo today by Clicking Here and see how SentinelOne can help keep you #cybersecure

Let’s Stay in Touch!
Subscribe to our blog above and get content delivered straight to your inbox or follow us on LinkedIn, Twitter, and Facebook to stay up to date on the latest news in cybersecurity!

Get a demo

Defeat every attack, at every stage of the threat lifecycle with SentinelOne

Book a demo and see the world’s most advanced cybersecurity platform in action.

Get Demo

SentinelLabs

SentinelLabs: Threat Intel & Malware Analysis

We are hunters, reversers, exploit developers, & tinkerers shedding light on the vast world of malware, exploits, APTs, & cybercrime across all platforms.

VISIT SITE

Wizard Spider and Sandworm

MITRE Engenuity ATT&CK Evaluation Results

SentinelOne leads in the latest Evaluation with 100% prevention. Leading analytic coverage. Leading visibility. Zero detection delays.

SEE RESULTS

Backdoor Factory: Is there malware hidden inside your applications?

Read more about Cyber Security

Read More