{"id":47101,"date":"2022-06-07T14:44:00","date_gmt":"2022-06-07T14:44:00","guid":{"rendered":"http:\/\/83c94824-f00a-4300-b404-89eea3870fc8"},"modified":"2022-06-07T14:44:00","modified_gmt":"2022-06-07T14:44:00","slug":"hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/","title":{"rendered":"Hackers are now hiding inside networks for longer. That&#8217;s not a good sign"},"content":{"rendered":"<div size=\"large\" uuid=\"afb2408d-c8ad-482e-9499-29e6632f0e1a\" class=\"c-shortcodeVideo\">\n<div id=\"dee49042-1614-4b4b-974d-766e4e2302cd\" class=\"c-avVideo o-ratio o-ratio-wide\">\n<div class=\"o-ratio_content\">\n<div class=\"c-videoTitlePanel\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856\" data-role=\"imageSource\" class=\"c-videoTitlePanel_image\"> <a class=\"c-videoTitlePanel_play\"><svg class=\"c-videoTitlePanel_play_icon\"><use xlink:href=\"#play\" \/><\/svg><\/a><\/div>\n<p> <!----> <!----> <\/div>\n<\/div>\n<\/div>\n<p>The amount of time cyber-criminal intruders are spending inside victims&#8217; networks is increasing, providing them with the ability to carry out higher complexity campaigns and more damaging cyberattacks.&nbsp;<\/p>\n<p>According to analysis by <a href=\"https:\/\/news.sophos.com\/en-us\/2022\/06\/07\/active-adversary-playbook-2022\/\" target=\"_blank\" rel=\"noopener\">cybersecurity researchers at Sophos<\/a>, who examined incidents targeting organisations around the world and across a wide range of industry sectors, the median dwell time that cyber criminals spend inside compromised networks is now 15 days, up from 11 days the previous year.&nbsp;<\/p>\n<div class=\"c-shortcodePinbox-textList c-shortcodePinbox-textList_floating g-border-thin-light-bottom g-outer-spacing-top-medium g-outer-spacing-bottom-medium\">\n<h3 class=\"c-sectionHeading\"> ZDNet Recommends <\/h3>\n<\/p><\/div>\n<p>Dwell time is the amount of time hackers are inside the network before they&#8217;re discovered or before they leave \u2013 and being able to spend an increased amount of time inside a compromised network undetected means they&#8217;re able to more carefully conduct malicious activity, such as monitoring users, stealing data or laying the foundations for a <a href=\"https:\/\/www.zdnet.com\/article\/what-is-malware-everything-you-need-to-know-about-viruses-trojans-and-malicious-software\/\" rel=\"follow\">malware<\/a> or <a href=\"https:\/\/www.zdnet.com\/article\/ransomware-an-executive-guide-to-one-of-the-biggest-menaces-on-the-web\/\" rel=\"follow\">ransomware<\/a> attack.&nbsp;<\/p>\n<p><strong><strong>SEE:&nbsp;<\/strong><a href=\"https:\/\/www.zdnet.com\/topic\/cybersecurity-lets-get-tactical\/#link=%7B%22linkText%22:%22Cybersecurity:%20Let's%20get%20tactical%20(ZDNet%20special%20report)%22,%22target%22:%22_blank%22,%22href%22:%22https:\/\/www.zdnet.com\/topic\/cybersecurity-lets-get-tactical\/%22,%22role%22:%22standard%22,%22absolute%22:%22%22%7D%23link=%7B%22role%22:%22standard%22,%22href%22:%22https:\/\/www.zdnet.com\/topic\/cybersecurity-lets-get-tactical\/%23link=%7B%22linkText%22:%22Cybersecurity:%20Let's%20get%20tactical%20(ZDNet%20special%20report)%22,%22target%22:%22_blank%22,%22href%22:%22https:\/\/www.zdnet.com\/topic\/cybersecurity-lets-get-tactical\/%22,%22role%22:%22standard%22,%22absolute%22:%22%22%7D%22,%22target%22:%22%22,%22absolute%22:%22%22,%22linkText%22:%22%3Cstrong%3ECybersecurity:%20Let's%20get%20tactical%20(ZDNet%20special%20report%3C\/strong%3E%22%7D\" rel=\"follow\"><strong>Cybersecurity: Let&#8217;s get tactical<\/strong><\/a><strong>&nbsp;(ZDNet special report)<\/strong><\/strong><\/p>\n<p>&#8220;It seems pretty obvious you don&#8217;t want people in your network, but the longer they have, the more time they have to completely compromise the environment. If they&#8217;re having to move quickly they might miss something,&#8221; John Shier, senior security advisor at Sophos told ZDNet.&nbsp;<\/p>\n<p>&#8220;Going deeper into the networks just allows them to penetrate harder-to-reach areas and find that business-critical data,&#8221; he added.&nbsp;<\/p>\n<p>One of the key methods cyber criminals are using to gain initial access to networks is through <a href=\"https:\/\/www.zdnet.com\/article\/youve-still-not-patched-it-hackers-are-using-these-old-software-flaws-to-deliver-ransomware\/\" rel=\"follow\">unpatched security vulnerabilities<\/a>, something that Sophos says is the root cause of 47% of incidents they investigated last year.&nbsp;<\/p>\n<p>Some of the most commonly exploited were the <a href=\"https:\/\/www.zdnet.com\/article\/brute-forcing-passwords-proxylogon-exploits-were-2021s-most-popular-attack-vectors\/\" rel=\"follow\">ProxyLogon<\/a> and <a href=\"https:\/\/www.zdnet.com\/article\/squirrelwaffle-loader-leverages-microsoft-exchange-server-vulns-for-financial-fraud\/\" rel=\"follow\">ProxyShel<\/a>l Microsoft Exchange Server vulnerabilities, which Shier describes as &#8220;widespread and easily exploitable&#8221; \u2013 and one of the reasons cyber criminals were able to spend more time in networks, because many organisations were slow to, or still haven&#8217;t applied, the security patches.&nbsp;<\/p>\n<p>Among the organisations that struggle most \u2013 and have the longest median dwell times \u2013 are <a href=\"https:\/\/www.zdnet.com\/article\/small-business-cybersecurity-avoid-these-8-basic-mistakes-that-could-let-hackers-in\/\" rel=\"follow\">small businesses<\/a> (21 days) and <a href=\"https:\/\/www.zdnet.com\/article\/ransomware-attacks-are-hitting-universities-hard-and-they-are-feeling-the-pressure\/\" rel=\"follow\">education organisations<\/a> (34 days). &nbsp;<\/p>\n<p>Typically, these organisations struggle to find <a href=\"https:\/\/www.zdnet.com\/article\/companies-are-tired-of-spending-money-on-cybersecurity-heres-how-to-change-their-minds\/\" rel=\"follow\">budget, resources and enough information security staff<\/a> to effectively manage even basic cybersecurity, let alone quickly detect suspicious activity in the network.<\/p>\n<p>Other techniques used by cyber criminals to breach network include <a href=\"https:\/\/www.zdnet.com\/article\/what-is-phishing-how-to-protect-yourself-from-scam-emails-and-more\/\" rel=\"follow\">phishing attacks<\/a>, as well as using stolen login credentials, <a href=\"https:\/\/www.zdnet.com\/article\/this-is-how-fast-a-password-leaked-on-the-web-will-be-tested-out-by-hackers\/\" rel=\"follow\">taken from earlier data dumps<\/a>. Hackers are also able to enter networks by using <a href=\"https:\/\/www.zdnet.com\/article\/these-systems-are-facing-billions-of-attacks-every-month-as-hackers-try-to-guess-passwords\/\" rel=\"follow\">brute-force attacks<\/a> to crack accounts with <a href=\"https:\/\/www.zdnet.com\/article\/these-are-the-terrible-passwords-that-people-are-still-using-heres-how-to-do-better\/\" rel=\"follow\">weak or common passwords<\/a>.&nbsp;<\/p>\n<p>No matter how intruders are entering the network or who they&#8217;re targeting, that they&#8217;re able to spend longer inside networks without being detected is bad for those who get breached.<\/p>\n<p>&#8220;We&#8217;ve seen this \u2013 multiple attackers ending up in the same network, <a href=\"https:\/\/www.zdnet.com\/article\/two-ransomware-gangs-hacked-the-same-target-at-the-same-time-heres-what-happened-next\/\" rel=\"follow\">multiple ransomware crews ending up in the same network<\/a>, the same crew going back into the same network again because the company didn&#8217;t close the hole in the first place after they&#8217;ve recovered \u2013 that&#8217;s what the longer dwell times are,&#8221; said Shier.&nbsp;<\/p>\n<p>There are steps that organisations can take to improve their cybersecurity defences to prevent intruders entering the network, including <a href=\"https:\/\/www.zdnet.com\/article\/this-one-change-could-protect-your-systems-from-attack-so-why-dont-more-companies-do-it\/\" rel=\"follow\">applying security updates as quickly as possible<\/a>, especially to critical systems, in order to prevent cyber criminals exploiting known vulnerabilities. &nbsp;<\/p>\n<p>Equipping users with <a href=\"https:\/\/www.zdnet.com\/article\/better-than-the-best-password-how-to-use-2fa-to-improve-your-security\/\" rel=\"follow\">multi-factor authentication<\/a>&nbsp;also adds an extra layer of security, because even if hackers attempt to use stolen passwords, it provides an additional barrier to overcome.&nbsp;<\/p>\n<p><strong><strong>SEE:&nbsp;<\/strong><a href=\"http:\/\/www.zdnet.com\/topic\/a-winning-strategy-for-cybersecurity\/\" rel=\"follow\"><strong>A winning strategy for cybersecurity<\/strong><\/a>&nbsp;<strong>(ZDNet special report)<\/strong><\/strong><\/p>\n<p>But even with several layers of defence, it&#8217;s possible that intruders could still gain access to the network \u2013 so it&#8217;s important that there&#8217;s an <a href=\"https:\/\/www.zdnet.com\/article\/the-key-to-stopping-cyberattacks-understanding-your-own-systems-before-the-hackers-strike\/\" rel=\"follow\">information security team in place who knows what regular activity looks like<\/a> and are able to&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/ransomware-even-when-the-attackers-are-in-your-network-its-not-too-late-to-fight-back\/\" rel=\"follow\">identity and investigate potentially<\/a> malicious behavior.&nbsp;<\/p>\n<p>&#8220;Security teams can defend their organisation by monitoring and investigating suspicious activity. The difference between benign and malicious is not always easy to spot,&#8221; said Shier.&nbsp;<\/p>\n<p>&#8220;Technology in any environment, whether cyber or physical, can do a great deal but it is not enough by itself. Human experience and skill and the ability to respond are a vital part of any security solution,&#8221; he said.&nbsp;<\/p>\n<h3><strong>MORE ON CYBERSECURITY<\/strong><\/h3>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cyber criminals are spending more time inside networks before they&#8217;re discovered, and that&#8217;s allowing them to do more damage.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-47101","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hackers are now hiding inside networks for longer. That&#039;s not a good sign 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers are now hiding inside networks for longer. That&#039;s not a good sign 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-06-07T14:44:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Hackers are now hiding inside networks for longer. That&#8217;s not a good sign\",\"datePublished\":\"2022-06-07T14:44:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/\"},\"wordCount\":709,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/bfc6b642e132659084dd25d2d06814f850b334a3\\\/2021\\\/12\\\/17\\\/cfe667fa-5887-412a-bac3-93d664aef65e\\\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/\",\"name\":\"Hackers are now hiding inside networks for longer. That's not a good sign 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/bfc6b642e132659084dd25d2d06814f850b334a3\\\/2021\\\/12\\\/17\\\/cfe667fa-5887-412a-bac3-93d664aef65e\\\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856\",\"datePublished\":\"2022-06-07T14:44:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/bfc6b642e132659084dd25d2d06814f850b334a3\\\/2021\\\/12\\\/17\\\/cfe667fa-5887-412a-bac3-93d664aef65e\\\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/bfc6b642e132659084dd25d2d06814f850b334a3\\\/2021\\\/12\\\/17\\\/cfe667fa-5887-412a-bac3-93d664aef65e\\\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hackers are now hiding inside networks for longer. That&#8217;s not a good sign\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hackers are now hiding inside networks for longer. That's not a good sign 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/","og_locale":"en_US","og_type":"article","og_title":"Hackers are now hiding inside networks for longer. That's not a good sign 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-06-07T14:44:00+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Hackers are now hiding inside networks for longer. That&#8217;s not a good sign","datePublished":"2022-06-07T14:44:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/"},"wordCount":709,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/","url":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/","name":"Hackers are now hiding inside networks for longer. That's not a good sign 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856","datePublished":"2022-06-07T14:44:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/bfc6b642e132659084dd25d2d06814f850b334a3\/2021\/12\/17\/cfe667fa-5887-412a-bac3-93d664aef65e\/20211206-danny-madnick.jpg?auto=webp&amp;fit=cover&amp;height=482&amp;width=856"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-now-hiding-inside-networks-for-longer-thats-not-a-good-sign\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Hackers are now hiding inside networks for longer. That&#8217;s not a good sign"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/47101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=47101"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/47101\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=47101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=47101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=47101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}