Curated Intelligence

Search This Blog

PODCAST

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

We have a Podcast! Listen Now 👇

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Tracking Cyber Activity Surrounding War In Israel

Background The Curated Intelligence community is a group of analysts from around the world that tracks the latest updates on the threat landscape. The latest situation Curated Intel has been following is the Hamas terrorist attack against Israel on 7 October 2023. The attack has subsequently resulted in thousands of civilian casualties on both sides and has destabilized the region. As with any modern conflict, cyber activity surrounds it from all nature of groups. The most widely recognised and surface-level type has been hacktivism due to the public announcements by threat actors claiming responsibility for attacks. This often takes on social networking sites, like Telegram and Twitter, among others. There has also been examples of the cybercrime underground exploiting the situation for financial gain. This includes offering databases of stolen data for sale as well as live access to compromised systems. This is typical behaviour for cybercriminals, but it should not be ignored by

Threat Group Naming Schemes In Cyber Threat Intelligence

Curated Intelligence members explore threat group naming schemes and why they are important Written by @BushidoToken BLUF All organizations have their own unique access into sets of data and telemetry that other organizations do not. Many organizations create and define their own clusters differently which generates unique threat group candidates Background How the complex task of adversary attribution should be performed is an often debated topic amongst Cyber Threat Intelligence (CTI) analysts from various backgrounds at various organizations. This is because there is no standardized way of doing attribution, but the way it is being done by some organizations is actually is problematic and counterproductive. The Curated Intelligence community are a varied bunch of passionate CTI analysts with years of experience. So naturally, whenever the topic of attribution comes up everyone likes to share their $0.02. This is one of the best parts of our community and leads to great discussions

The Threat Actor Profile Guide for CTI Analysts

Threat actor profiles are made for a range of reasons. An example trigger for creating a new profile can include after an incident, e.g., an internal detection or supply chain breach has been observed. Alternatively, CTI research has identified that their organisation(s) or client(s) are likely to be targeted by the threat actor due to a number of factors. The ‘Threat Actor Profile Guide for CTI Analysts’ was created after multiple Curated Intelligence members requested advice about the topic and their creation. Individuals in our community expressed difficulty and some shared their experiences around the difficulty of making one for their stakeholders. The Three Page PDF document resource is available in our GitHub here: This guide offers a templated introduction for CTI analysts getting started with profiling threat actors. Experienced CTI analysts and mature teams will likely have a more refined methodology and even different types of threat actor profiles tailored for a s

Powered by Blogger