Initial Access Brokers (IABs)
Initial Access Brokers (IABs) are threat actors who gain unauthorized access to corporate infrastructure and sell that access to others.
Kaspersky IT Encyclopedia
IT Security Encyclopedia and Glossary
Live Last read · last published · next check
Latest posts
Containerized environment
A containerized environment is infrastructure for running applications in isolated digital spaces (containers) that bundle the application’s code together with all of its dependencies.
Trusted relationship attack
A trusted relationship attack is an attack in which bad actors infiltrate a third-party company (contractor, partner, etc.) that has privileged access to the target organization's systems with the goal of ultimately compromising that organization.
Cyber immunity
Cyber immunity is the concept of building IT systems with architecture-level protection that makes cyberattacks unprofitable; it also refers to the level of security of such systems.
Bring Your Own Vulnerable Driver (BYOVD)
Bring Your Own Vulnerable Driver (BYOVD) is a malicious technique whereby an attacker injects a legitimate but vulnerable driver into Windows and exploits vulnerabilities in it to gain kernel-level privileges.
Artificial intelligence (AI)
Artificial intelligence is the computer-based replication of human intelligence abilities. The term is often used to refer to technologies based on machine learning.
Family (malware family)
Malware or unwanted software family is a classification unit for detectable objects that share common attributes.
Crimeware
Crimeware is software used for automating cybercrime. In particular, ransomware, stealers and other software used for criminal purposes fall under the crimeware umbrella.
Conversation hijacking
Conversation hijacking (or thread hijacking) is a targeted social engineering attack where the intruder poses as a participant in an ongoing email or other message exchange.
Security policy (document)
A security policy is a regulatory document that outlines rules, requirements, and procedures for ensuring information security within an organization.