Your organization’s leadership is 12 times more likely to be the target of a security incident and nine times more likely to be the target of a data breach than they were last year. Find out how they can be protected.
Read the Datasheet
Gift Cardsharks: The Massive Threat Campaigns Circling Beneath the Surface
Learn about the attack group primarily targeting gift card retailers and the monetization techniques they use.
Get the Report
Threat Hunting Workshop Series
Join one of our security threat hunting workshops to get hands-on experience investigating and remediating threats.
Attend an Upcoming Workshop
Inside Magecart: New RiskIQ & Flashpoint Research Report
Learn about the groups and criminal underworld behind the front-page breaches.
Threat Hunting Guide: 3 Must-Haves for the Effective Modern Threat Hunter
The threat hunting landscape is constantly evolving. Learn the techniques, tactics, and tools needed to become a highly-effective threat hunter.
January 12, 2016
Integration Allows Analysts to Link Adversary Profiles with their Attack Infrastructures to Preempt Threats
SAN FRANCISCO, Jan. 12, 2016 — RiskIQ, the leading security company defending organizations from threats outside the firewall, today announced that its PassiveTotal threat infrastructure analysis product now includes the Intel 471’s actor-centric cyber threat intelligence service. This integration allows security analysts to combine Intel 471 attacker profile information (tools, techniques and motivations) with malicious infrastructure data sets (IPs, domains, etc.) within PassiveTotal to identify threats in the planning stages.
Tweet: .@RiskIQ adds @Intel471Inc who and why #threatintelligence to #PassiveTotal http://bit.ly/1TPRZbj
“Detecting threats before they are carried out by adversaries is the ultimate goal of any security intelligence program,” said Elias Manousos, CEO of RiskIQ. “The addition of ‘Who’ and ‘What’ data from Intel 471 within the PassiveTotal platform now enables analysts to connect malicious actors, their upcoming campaigns and attack infrastructures — to shutdown threats before they can reach the target organization.”
To provide a comprehensive view of threats, PassiveTotal can now supplement infrastructure intelligence including DNS, WHOIS records and SSL Certificates with data on adversaries gathered by Intel 471 from underground forums and other closed sources. When investigating a suspected malicious domain within PassiveTotal, this integration allows analysts to see individuals that are linked to the resource and their activity on the Dark Web.
“Partnering with RiskIQ and PassiveTotal is a big step for us as it enables our joint customers to understand threat actors, where they come from and the infrastructure they use,” said Mark Arena, CEO of Intel 471. “This holistic view of the threat fuses the incident-centric and actor-centric approaches to cyber threat intelligence.”
In a recent investigation, a malicious domain searched within PassiveTotal produced several Intel 471 reports which revealed that an adversary associated with it was involved in developing the Cerebrus point of sale (POS) malware and was looking for help to infect retail devices. With all the domain and threat actor activity information, including the details of each Intel 471 report, contained in a unified view, security analysts can instantly discover an adversary’s digital footprint as well as their active and even upcoming campaigns.
PassiveTotal with Intel 471 integration is available immediately to all Intel 471 customers.
More details are available on RiskIQ’s PassiveTotal blog.
Formed in 2014, Intel 471 was created in order to provide unique, high-value actor-centric cyber threat intelligence information in support of our customers’ information security operations. Whilst some companies may offer raw indicators or feeds as threat intelligence, Intel 471 focuses on the individual threat actors and groups that pose a threat to your organization and sector. Intel 471 employs specialists located globally who are experts in their region and is incorporated in the United States. For more information, please visit www.intel471.com