Detecting malware across operating systems

Abstract

The AlienSpy RAT made headlines recently.1 It is an alarmingly sophisticated cross-platform delivery method giving new life to the well-known Citadel trojan, a Zeus variant that has been in circulation since early 2012.2 AlienSpy can target Windows, Linux, Android and Mac OS X devices and boasts at least 12 separate spying plugins that cyber-attackers can use to steal data, gain remote desktop access or even capture webcam sessions.Given the increasing frequency of cross-platform malware exploits, a frequently asked question is whether anti-malware engines designed for Windows can detect Linux- and Android-based malware.Szilard Stange of OPSWAT details tests that show how Windows-oriented anti-malware solutions are actually very effective at detecting Linux and even Android malware. New cross-platform malware is being discovered every day, but by putting our focus on improving detection via the latest multi-scanning technologies, organisations can mitigate the damage caused by these sophisticated exploits.