The Cyber Threat Intelligence Blog

January 24, 2018

Dive Deeper into your Digital Footprint with Open Ports and Workspace Insights

With the holiday season behind us, the RiskIQ Digital Footprint team hasn’t slowed down. We have been working hard to make it faster and easier to address gaps in your security posture outside the firewall and provide deeper insight into your Digital Footprint. Today, we’re happy to announce the release of two great new features—Open […]

January 23, 2018

Espionage Campaign Leverages Spear Phishing, RATs Against Turkish Defense Contractors

Regions of the world in geopolitical turmoil, like Turkey, are prime targets for cyber espionage campaigns. Starting in mid-November, an unknown actor purporting to be from the tax collection arm of the Turkish government began a spear phishing campaign against a Turkish defense contractor. The group used tactics that have become extremely useful for cyber spies—spear […]

January 19, 2018

IDN Homographic Attack Detection in RiskIQ External Threats

Internationalized domain name (IDN) homographic attacks, or “Punycode” attacks, made headlines back in April and are once again gracing front pages. IDN homographic attacks, a type of typosquatting, occur when threat actors create domains that use non-ASCII characters that seem unique, but once processed by the browser, have a striking similarity to existing brand names. Threat […]

January 18, 2018

Digital Threat Intelligence Management: RiskIQ on the EMA Radar™

RiskIQ is proud to announce that we were named the sole Technology Leader and a 2017 Value Leader by analyst firm Enterprise Management Associates (EMA) in the EMA Radar™ for Digital Threat Intelligence Management: Q4 2017 Report. The report highlights the fact that companies are taking on more risk than ever by adopting digital transformation strategies […]

January 16, 2018

First Activities of Cobalt Group in 2018: Spear Phishing Russian Banks

Last year November, we documented activities of the Cobalt Group using CVE-2017-11882. In December they were already setting up for their next campaign. Today, on January 16th, the first wave of spear phishing emails were delivered to the inboxes of Russian banks. Sadly, this time around, the group didn’t forget to BCC. The emails were […]

January 12, 2018

About Spectre and Meltdown

Spectre (CVE-2017-5715 and CVE-2017-5753) and Meltdown (CVE-2017-5754) exploit hardware implementations of most modern microprocessor architectures, which may allow unauthorized disclosure of information to an attacker. Impact At this point, there are no known exploits for these vulnerabilities. There is proof-of-concept code available exploiting both, and weaponization is likely only a matter of time. RiskIQ is […]

December 21, 2017

Q3 Malvertising Roundup: Less Malvertising, More Malware

Despite worldwide malvertising rising consistently since programmatic advertising gained popularity, it took a brief hiatus in Q3 2017. Overall, RiskIQ scanned 53% fewer advertisements containing a blacklisted incident—phishing, scams, exploit kits, and malware—than Q2, reversing a trend highlighted in our Q2 report, which found 19% increase in total malvertising over Q1. RiskIQ has seen a […]

December 20, 2017

Mining Insights: Infrastructure Analysis of Lazarus Group Attacks on the Cryptocurrency Industry

RiskIQ collaborated with Proofpoint Cyber Security on research for a report published today investigating the activities of North Korea’s Lazarus Group, which highlights the group’s recent focus on cryptocurrency investors and exchanges. Earlier this year, the activities of the Lazarus group in South Korea were discussed and analyzed, as they managed to compromise accounts on various […]

December 20, 2017

Looking Ahead: RiskIQ’s 2018 Cyber Security Predictions

The digital threat landscape has shifted considerably, with several landmark events transpiring over 2017 that affected the way we view cyber security. The new year will be sure to introduce brand new attacks, but many of the same trends we saw emerge this year will continue and evolve throughout 2018. In our 2018 cyber security […]

Feb	JAN	Mar
	24
2014	2018	2019