Fileless malware does not drop an executable file on disk: it runs in memory and abuses legitimate system tools, such as PowerShell or WMI, to do its work. That is why it can slip past traditional antivirus, which looks for files, and is better caught by EDR that analyzes behavior.
How TecnetOne handles it: Managed Endpoint Protection
memory-based malware, living off the land, fileless attack
Related terms
Infostealer
An infostealer is a type of malware built to steal information stored on a device, especially browser passwords, session cookies, card data and crypto wallets, and send it to the attacker, often within seconds of infection. Those credentials are sold on the dark web and are a common entry point for ransomware attacks.
Heuristic analysis
Heuristic analysis is the technique an antivirus uses to detect new or modified malware by how it behaves or by suspicious traits in its code, without needing a known signature. It helps catch unknown threats, although it can produce more false positives than signature-based detection.
Cryptojacking
Cryptojacking is the unauthorized use of a company's computers or servers to mine cryptocurrency for someone else. It usually does not steal data, but it eats up processing power and electricity, slows devices down and is often a sign that someone already has access to the company network or cloud.
Scareware
Scareware is a scam that shows fake alerts, for example that your computer is infected, to convince you to download a program or pay for a supposed fix. The screen imitates antivirus or Windows warnings, and the program it offers is usually malware or a worthless charge.
Malware
Malware is any program designed to damage a device, steal information or take control of a system without the owner's permission. The word is short for malicious software, and it includes viruses, trojans, ransomware, spyware, worms and keyloggers, which differ in how they get in and what they do once inside.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.