Check Point interviews

“Agents abused various web vulnerabilities, such as Remote Code Execution (RCE), to achieve their goals.”

“The malware is placed next to legitimate, signed executables from OpenAI and Anthropic so it can be loaded indirectly, a technique commonly known as DLL sideloading, which is often used to bypass security protections.”

“the binaries already had very low detection rates thanks to their anti-sandbox and other anti-analysis techniques”

“Operators mostly only interacted with their agents to check the progress of the current operations – attacks were almost fully autonomous.”

“threat actors can carry out attacks at a previously impossible speed, on a broad scale and without any technical knowledge”