Magecart Strikes Again
Ticketmaster, British Airways, and Newegg have all been compromised. Who’s next? Read our research to see how we discovered the breaches.
IDG Connect: 2017 State of Enterprise Digital Defense Report
Findings quantify the security management gap and business impact of external web, social, and mobile threats.
Get the Research Report
RiskIQ Digital Threat Management Platform Datasheet
Learn about our platform and products.
Read the Datasheet
Frost & Sullivan: The Digital Threat Management Platform Advantage
The material benefits of a platform-based approach to security outside the firewall.
Read the Report
Rackspace Accelerates External Digital Threat Investigation with RiskIQ PassiveTotal
Download Case Study
EMA Radar™ Q4 2017 Report
RiskIQ ranked a technology and value leader in digital threat intelligence management.
Get the Analyst Report
January 12, 2016
Integration Allows Analysts to Link Adversary Profiles with their Attack Infrastructures to Preempt Threats
SAN FRANCISCO, Jan. 12, 2016 — RiskIQ, the leading security company defending organizations from threats outside the firewall, today announced that its PassiveTotal threat infrastructure analysis product now includes the Intel 471’s actor-centric cyber threat intelligence service. This integration allows security analysts to combine Intel 471 attacker profile information (tools, techniques and motivations) with malicious infrastructure data sets (IPs, domains, etc.) within PassiveTotal to identify threats in the planning stages.
Tweet: .@RiskIQ adds @Intel471Inc who and why #threatintelligence to #PassiveTotal http://bit.ly/1TPRZbj
“Detecting threats before they are carried out by adversaries is the ultimate goal of any security intelligence program,” said Elias Manousos, CEO of RiskIQ. “The addition of ‘Who’ and ‘What’ data from Intel 471 within the PassiveTotal platform now enables analysts to connect malicious actors, their upcoming campaigns and attack infrastructures — to shutdown threats before they can reach the target organization.”
To provide a comprehensive view of threats, PassiveTotal can now supplement infrastructure intelligence including DNS, WHOIS records and SSL Certificates with data on adversaries gathered by Intel 471 from underground forums and other closed sources. When investigating a suspected malicious domain within PassiveTotal, this integration allows analysts to see individuals that are linked to the resource and their activity on the Dark Web.
“Partnering with RiskIQ and PassiveTotal is a big step for us as it enables our joint customers to understand threat actors, where they come from and the infrastructure they use,” said Mark Arena, CEO of Intel 471. “This holistic view of the threat fuses the incident-centric and actor-centric approaches to cyber threat intelligence.”
In a recent investigation, a malicious domain searched within PassiveTotal produced several Intel 471 reports which revealed that an adversary associated with it was involved in developing the Cerebrus point of sale (POS) malware and was looking for help to infect retail devices. With all the domain and threat actor activity information, including the details of each Intel 471 report, contained in a unified view, security analysts can instantly discover an adversary’s digital footprint as well as their active and even upcoming campaigns.
PassiveTotal with Intel 471 integration is available immediately to all Intel 471 customers.
More details are available on RiskIQ’s PassiveTotal blog.
Formed in 2014, Intel 471 was created in order to provide unique, high-value actor-centric cyber threat intelligence information in support of our customers’ information security operations. Whilst some companies may offer raw indicators or feeds as threat intelligence, Intel 471 focuses on the individual threat actors and groups that pose a threat to your organization and sector. Intel 471 employs specialists located globally who are experts in their region and is incorporated in the United States. For more information, please visit www.intel471.com