To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".
Did Sonicwall released any IPS / GAV signature for preventing the Kraken fileless attack which is abuses Microsoft Windows Error Reporting (WER)?
I just received confirmation from the IPS/GAV team that the following signatures in GAV should be able to block Kraken fileless attack.
GAV: Kraken.RSM_5 (Trojan)
GAV: KrakenCrypt.RSM_2 (Trojan)
GAV: Kraken.RSM_2 (Trojan)
GAV: Kraken_2 (Trojan)
Technical Support Advisor, Premier Services
I am checking on this with the IPS/GAV team. I will keep you posted!
I couldn't find any signature related Kraken Fileless attack but found some signature in GAV related about kraken.
Yes, exactly. Me too. I have written to the concerned team to get confirmation on the same. I will let you know.