Threat Intelligence Archives

Threat Intelligence

By studying adversaries and understanding their strategies and objectives, organizations can build more effective, more refined and more robust cyberdefenses. This series demonstrates how threat intelligence can be used to help organizations of all sizes strengthen their security posture and accelerate security decision-making processes. With a smarter and more targeted response to cyberthreats, organizations can allocate security resource more efficiently, proactively getting ahead of future attacks and raising the barrier to entry for cybercriminals intent on breaking in.

Our top reads

What is Threat Intelligence and why is it important?

Credential theft: the business impact of stolen credentials

TA505 evolves ServHelper, uses Predator The Thief and Team Viewer Hijacking

CryptoAPI in Malware

M00nD3v, HawkEye threat actor, sells malware after COVID-19 diagnosis

June 30, 2020

Key Points The information-stealing malware dubbed M00nD3v Logger was recently auctioned off on Hack Forums, together with HakwEye Reborn. The threat actor – operating under the alias “M00nD3v” – states that they sold the malware in response to being diagnosed with COVID-19. M00nD3v was previously involved in sales...

Covid19 Dark web HawkEye M00nD3v Malware Threat Context Threat Intelligence

How to develop efficient and advanced triage and investigation capabilities

June 12, 2020

To mature beyond the foundational elements of their security operations, SOC teams are pursuing more advanced means of triaging (i.e. grading and prioritizing) threats and launching rich, effective investigations. This is made possible by harnessing threat intelligence to fill-in a clearer picture of their threat landscape, respond to better effect...

Cyber Threats SOC Threat Intelligence

What is digital risk protection?

May 27, 2020

Digital risk protection (DRP) is – in common with many other forms of security – the proactive defense of business assets against the threats they face. What sets DRP apart is its relevance to the growing digital maturity of organizations across all sectors. The further that organizations progress to...

Cyber Security digital risk Threat Intelligence

Why Threat Intelligence is Central to Effective Vulnerability Prioritization

May 26, 2020

Vulnerability management is a persistent feature of good cybersecurity practice; a routine hygiene to help proactively reduce organizational risk. But vulnerability management is also a somewhat blunt instrument when faced with a critical mass of threats, each evolving at a different pace and each with unique implications for individual...

digital risk Threat Intelligence Vulnerability

Sounding the Pharma Alarma: An overview of the pharmaceutical threat landscape

May 11, 2020

The whole world is fighting the spread of COVID-19 and working to return to the lives we had before. Pharmaceutical and medical research teams in different countries are busy searching for a solution to win the battle against the virus. However, cybercriminals and threats don’t rest, even in an...

Covid19 Pharmaceutical Industry Threat Actors Threat Analysis Threat Context

Deploying the right threat intelligence at the right level

January 24, 2020

Threat intelligence has an influential role to play in organizations, but – like any technology-related solution – it must be applied in the right way to meet its full potential. This blog discusses how to maximize resources by deploying the right threat intelligence, at the right level, for your organization. There...

CISO SOC Threat Intelligence

TOP 5 ATT&CK techniques used by Threat Actors tied to Iran

January 10, 2020

On the 3rd of January 2020, the Iranian Major General Qasem Soleimani was killed in a US drone strike ordered by President Donald Trump at Baghdad International Airport. Since then, popular demonstrations and military responses have been seen coming from Iran. It’s important to remember, however, that wars and...

ATT&CK Iran Threat Actors Threat Context Threat Intelligence

TA505 evolves ServHelper, uses Predator The Thief and Team Viewer Hijacking

December 17, 2019

Countries targeted by TA505 using ServHelper Introduction ServHelper is a backdoor first spotted at the end of 2018 by Proofpoint and linked to TA505. This threat actor is known to have distributed Dridex and Locky in the past, in addition to FlawedAmmyy, FlawedGrace and Get2/SDBBot more recently, amongst others. This blog post will offer some analysis on developments relating to ServHelper, including detail...

Cyber Threats Malware Threat Actors Threat Analysis

Top security concerns for the Financial Services industry in 2020

December 5, 2019

Following on from the release of our whitepaper earlier this week, a survey has concluded that the Banking and Financial Services sector is struggling with a skills shortage along with the sheer volume of threats and alerts as it continues its ongoing battle against cybercrime. This is according to...

Financial & Banking Fraud Threat Intelligence

cyberthreat-intelligence-financial-services-banking

Follow the money: cyberthreat intelligence for Banking & Financial services

Threat Intelligence

December 4, 2019

Banks and financial services handle some of the most valuable information to cybercriminals, from account and credit card data to sensitive PII (personally identifiable information). As such, these organizations remain at the forefront for risk as cybercriminals become increasingly sophisticated and malicious in their methods. A new generation of...

Cyber resilience Financial & Banking Threat Intelligence

What does good resilience look like?

Threat Intelligence

November 18, 2019

Business leaders can learn a lot about cyberdefense by studying how a lioness protects her cubs. Like any mother, she puts up the stiffest defenses against all known forms of attack. But she will also take care to instill resilience in her offspring in case, inevitably, those defenses at...

Cyber resilience Cyber Security

Spanish consultancy Everis suffers BitPaymer ransomware attack: a brief analysis

November 6, 2019

On 4th November 2019 researchers and the media reported a massive ransomware attack against several Spanish companies. Some of this news was exaggerated as it transpired that just two companies confirmed a security incident. However, both companies were attacked by a different threat actor. This blog post will seek to clarify some details concerning the attack against Everis, which was different to...

Cyber Attacks Dridex Ransomware Threat Analysis

Roast the perfect blend of automation and human intelligence

November 4, 2019

For those who enjoy a good cup of coffee, many more would surely choose a barista-made brew than take their chances from a vending machine. Automation, so the argument goes, is not a panacea. This coffee analogy is often brought out in debates about the emergence of security automation...

Automation Real-time Threat Intel Tools

State of the market: Threat Intel in 2019

Threat Intelligence

September 18, 2019

Lifting the veil The threat intelligence market is growing rapidly but there is still some haziness in organizations’ understanding of the segment. Many consider threat intelligence the answer to thwarting the increasingly complex and devastating cyberattacks that plague organizations and individuals, but few understand exactly what it means beyond...

Threat Intelligence

The cost of doing business: cyberthreat intelligence for retail & e-commerce

September 12, 2019

The internet has changed the way that goods and services are bought and sold. The retail and e-commerce sector continues to undergo rapid transformation as consumer expectation increases. We demand high quality experiences, products and services, on desktop and on mobile. On the back end, analytic engines, third-party integrations...

Cyber Threats Retail Threat Intelligence

EuskalHack

June 26, 2019

Last week, Blueliv was invited to participate in the fourth edition of EuskalHack in San Sebastián. Geared towards sharing information, the event hosted presentations focused on new discoveries, personal projects and tools from different disciplines in cybersecurity. These included both red team and blue team activities, both sharing information...

Data breach under GDPR: one year later

May 28, 2019

The European Union General Data Protection Regulation (GDPR) came into force on 25th May 2018. Just over a year later, European data protection regulators have reported nearly 90,000 data breach notifications so far, and notably these are only those which have been legally disclosed. Law firm DLA Piper recently suggested...

Data Breach GDPR

Shining a light on the darknet

Threat Intelligence

May 21, 2019

A common visualization for the Internet is an iceberg. The indexed ‘surface’ web is less than 10% of what is visible, but 90% is non-indexed and known as the deep web. A small subset of the deep web includes hidden information and services: the dark web, or darknet. It’s...

Dark web Threat Intel Tools

Threat Actor activity: a quick recap

May 3, 2019

In our recent Threat Landscape Report we profiled several active threat actors which have made an impact over the past year. All of the threat actors in this article remain under close observation. Sharing this intelligence is part of our ongoing mission to collaborate with industry peers, enrich the...

Cyber Attacks Threat Actors

Threat intelligence for healthcare: how to get the most out of your investment

Threat Intelligence

February 14, 2019

Healthcare C-suite leaders are facing challenging times. This is the most breached sector globally, accounting for 24% of all cases investigated by Verizon. Valuable patient data, mission critical but exposed digital endpoints and strict compliance requirements all add to the cybersecurity challenge. This is where threat intelligence (TI) can...

Insurance Threat Intel Guide

Real-time threat detection and why timing is the key to threat intelligence

Threat Intelligence

January 31, 2019

You wouldn’t sit idle under siege. However, when it comes to confronting real-time cyberthreats, it is what some businesses are doing – oftentimes without even realizing it. Organizations are increasingly finding themselves targets of cybercrime, carried out by hacktivists, nation states, or financially motivated criminals. In fact, on average...

Cyber Threats Threat Intel Tools

Effective threat intelligence for the financial sector

Threat Intelligence

January 11, 2019

Financial sector CISOs and security teams face a tough challenge. They need to keep the organization safe from the huge volume of indiscriminate threats that are unfortunately the price of doing business on the internet today. But they must also ensure they’re as resilient as possible to targeted, sophisticated...

Financial & Banking Threat Intel Guide

Why threat intelligence helps CISOs make better security decisions

Threat Intelligence

November 30, 2018

In just a few short years, the discipline of threat intelligence (TI) has grown from something on the cutting edge of cybersecurity, to a must-have feature for any CISO serious about effectively managing online risk. Allowing organizations to finally move from a reactive to a proactive posture, it can...

Threat Intel Guide

Top 10 Criteria for Buying the Best Threat Intelligence Solutions

Threat Intelligence

November 30, 2018

CISOs are busy people. The chances are you’re balancing a variety of tasks: from communication with the board, to managing incident response, organization-wide training strategies, and a growing regulatory compliance burden driven by the GDPR and EU NIS Directive. This leaves little time to spend on due diligence to...

Threat Intel Guide

What does threat mitigation mean in practice?

Threat Intelligence

November 30, 2018

Cyber threats have reached epidemic proportions. In the UK for example, nearly half (43%) of all businesses polled by the government in 2018 said they’d suffered a security breach or attack in the previous 12 months — and the real figure could be much higher. One vendor said it...

Threat Detection Tools

Threat intelligence tools your cybersecurity team needs

Threat Intelligence

November 30, 2018

Threat intelligence (TI) is a vital capability for any IT security department. If used effectively, it can offer CISOs the ability to take security from a reactive to a proactive posture, enabling them to better manage cyber risk and support the business-wide digital transformation agenda. But the major caveat...

Threat Intel Tools

How to choose the right Threat Intelligence for your organization

Threat Intelligence

November 30, 2018

Today’s CISOs face an unprecedented range of pressures. They are tasked with creating the secure foundation on which the success of boardroom-led digital transformation efforts rest. They must manage a growing volume and variety of risks across networks, applications, clouds, endpoints, servers and supply chains. And they must do...

Threat Intel Guide

What is Threat Intelligence and why is it important?

Threat Intelligence

November 2, 2018

Index Introduction What threat intelligence isn’t ‘Data’ ‘Information’ What threat intelligence is? Gathering Processing and actionable delivery Integration, visualization and dissemination Categories of threat intelligence Tactical Operational Strategic When to use threat intelligence Before an attack During an attack After an attack The benefits of real-time, dynamic threat intelligence...

Threat Intel Guide

Categories

Tags