THE CAT AND MOUSE GAME: EXPLOITING STATISTICAL WEAKNESSES IN HUMAN INTERACTION ANTI-EVASIONS

Summary from the TLDR InfoSec newsletter

Sandboxing is a common malware analysis technique that shifts the burden of detection onto attackers who must detect that their malware is executing in a sandbox and then evade malware detection. Researchers from Check Point Research devised a sandbox evasion technique in which their malware emulates a random mouse walk to simulate a human and evade sandbox detection. Check Point Research has provided an in-depth implementation of a counter-evasion algorithm to detect this evasion.