Arms Cyber recently announced a new capability of its solution for companies with endpoints running on Linux or Windows that combines preemptive deception, movement, and hiding capabilities to help them detect, block, and remediate from encryption and business interruption activities.
“The size and scope of ransomware attacks are increasing every day,” said Arms Cyber Chief Product Officer Josh McCarthy, “and despite existing market solutions that emphasize ‘stopping known malware,’ this approach does not sufficiently protect against the real threat, which is the unknown zero day attacks. We want to shift the market focus back to preemptive approaches, in order to mitigate attacks instead of responding after the fact.”
Attackers using living-off-the-land (LOTL) techniques to establish patterns that deviate from normal operating procedures and Arms Cyber’s zero trust policies build off these deviation requirements to reinforce more effective prevention.
Integrating Arms Cyber’s Stealth Directories at the endpoint introduces a unique file hiding capability, since threat actors rely on reliable information about their target and static environments offer an ideal landscape for gathering such data. This makes it difficult for attackers to gain actionable intelligence they need about their target.
“Most anti-ransomware solutions fall short because they focus on passive detection and response over proactive protection and prevention—they can’t respond to a breach until after it has occurred,” McCarthy said. “To prevent this, Arms Cyber integrates strategically placed deceptive tripwires with broader encryption monitoring, which, combined with stealth directories, enables a company to detect and stop attackers earlier in the ransomware attack lifecycle. With the addition of stealth directories and Linux support, attackers are not able to steal and exfiltrate what they are unable to locate on an organization’s most critical endpoints.”
Additionally, Arms Cyber is introducing further support for various Linux operating systems that addresses ransomware attacks that put Linux users at significant risk. This support provides low-overhead protection for Linux servers and data storage as well as legacy platforms that don’t support advanced malware protection. This product is currently available.
Strengthening cybersecurity and ransomware defense
Arms Cyber has used the first few months of 2025 to continue building up ransomware defenses for organizations. In March, the enterprise announced a strategic partnership with Solid Border, a cybersecurity solutions provider with expertise in network security, firewall management, and risk assessment.
This collaboration gives Solid Border customers advanced protection against ransomware and modern cyber threats to ensure critical infrastructure remains secure in an increasingly hostile digital environment.
“At Arms Cyber, our mission is to innovate relentlessly and stay ahead of emerging threats,” Arms Cyber CEO Bob Kruse said. “Partnering with Solid Border enables us to combine our cutting-edge AMTD technology with their extensive expertise in network security, offering organizations a proactive and resilient defense that truly sets a new standard in cybersecurity.”
In 2024, a Flashpoint report identified over 4,700 ransomware attacks with 53 percent targeting U.S. companies. Learn about more takeaways from the report and the steps organizations can take to manage and de-escalate ransomware activities.