Be it personal or professional, it’s now an ordinary fact of life that people own dozens of different online accounts. From the essential to the mundane, every facet of our lives can be linked to a service that’s probably tethered to its users by an account name and password. For cybercriminals, those account names and …
Cybercriminals have so many schemes aimed at your… Read More »
Since its release in 2012, Cobalt Strike has been one of the most popular tools for penetration testers to use when simulating how known threat actor tools will look when targeting an organization’s network. However, there is a downside to that popularity: the criminals love it, too. And if they are using it, it’s definitely …
At the recent 2021 RSA conference, some of the best and brightest minds the cybersecurity industry has to offer came together to present numerous ideas on how to stop cybercriminals from carrying out their crimes. At the very same time in other corners of the internet, those very same cybercriminals were holding their own formal …
Call for crimes? Russian-language forum runs contest… Read More »
A notorious ransomware gang says it’s no longer trying to avoid targets that are based in the United States, and despite the heightened focus from lawmakers, the group says it’s doubling its focus on U.S. targets. In a short interview posted to the Russian OSINT Telegram channel that has since been deleted, an alleged representative …
Alleged REvil member says gang has no fear over U.S.… Read More »
When it comes to attributing malicious cyber activity, there are two buckets by which actors generally fall in: “financially-motivated” or “nation-state.” The former is ultimately interested in money, while the latter is more concerned with obtaining or exploiting sensitive information to gain an advantage over a government or commercial entity. For the past decade, defenders …
The blurry boundaries between nation-state actors and… Read More »
Cortex XSOAR is updating its offerings with Threat Intelligence Management (Cortex XSOAR TIM 2.0) to simplify how users leverage threat insights across all their SecOps workflows. Rishi Bhargava, VP of Product Strategy at Palo Alto shared, “We are proud to launch our TIM 2.0 solution with Intel 471, a key threat intelligence partner in the …
How SOAR plus threat intelligence empowers security… Read More »
Retail has long been a cornerstone of business on the internet, giving people a convenient way to track down any and every product or service they could possibly want. However, even as subsets of the retail industry — such as dining or hospitality — find ways to leverage the internet to enhance their business, the …
Cybercriminals shop around for schemes targeting retail Read More »
When you break down how transportation companies actually work, you can find yourself looking at nothing but supply chains. From moving people or goods from one place to another, keeping track of the vehicles that are transporting those people or goods, the third parties that are responsible for the maintenance and operations of those vehicles, …
A big reason why ransomware has grown into such a large cybersecurity problem is because it’s easy for criminals to get involved. With promises of millions of dollars and very little threat of legal trouble, attacks are happening at a rate that is increasingly difficult for enterprises to keep up with. What makes it so …
Three ways ransomware-as-a-service has become easier… Read More »
Ransomware is a top threat that security teams should be tailoring their systems to defend against. But in order to do so, they may need to look further than the ransomware itself. And by widening that scope, these teams may protect their enterprise beyond the damage that ransomware can cause. The activity that Intel 471 …
Here’s how information stealers pose a threat beyond… Read More »
There is a group in the cybercriminal underground that is trying to collect troves of enterprise data the same way that millions of gamers collect Pokémon. Since surfacing in April 2020, the group — which refers to itself as ShinyHunters — has been behind some of the most notable data breaches that have been made …
ShinyHunters: Here's how to stop the new hacking group Read More »
One of the most damaging forms of cybercrime is also one that requires very little technical knowledge to pull off. Business email compromise, or BEC for short, cost U.S. companies $1.8 billion in losses in 2020, representing 43 percent of all cybercrime losses for the year. Yet despite the low bar of entry, actors involved …
Authored by Max Kersten, John Fokker, Thibault Seret and Intel471 This blog post also ran on McAfee’s Enterprise ATR blog. Executive Summary McAfee Enterprise ATR believes, with high confidence, that the Groove gang is associated with the Babuk gang, either as a former affiliate or subgroup. These cybercriminals are happy to put aside previous Ransomware-as-a-Service …
The manufacturing sector is highly dependent on a secure supply chain. Companies powering this sector are acutely aware of how a cyber attack on any part of a supply chain can bring their business to a screeching halt. When it comes to cybersecurity protections, this sector must focus on protecting its technological supply chain, as …
Manufacturers should focus on protecting their supply… Read More »
Two-factor authentication is one of the easiest ways for people to protect any online account. So, of course criminals are trying to circumvent that protection. Intel 471 has seen an uptick in services on the cybercrime underground that allow attackers to intercept one-time password (OTP) tokens. Over the past few months, we’ve seen actors provide …
Cybercriminals going after one-time passwords with… Read More »
The public sector is an extremely high-value target for cybercrime due to the wealth of valuable information it possesses, such as PII and confidential and sensitive documents. Intel 471 has observed government-run systems being exploited in multiple ways for both financial gain or in politically motivated cyberattacks. By analyzing and distinguishing the common threats and …
The public sector is a juicy target for cybercriminals Read More »
If you look back through all of the research Intel 471 has released on cybercriminals making money on stolen digital assets, a major takeaway is that the cyber underground will adopt any scheme, as long as it results in money being made. With the world trying to move past the global COVID-19 pandemic, another opportunity …
Cybercriminals cash in on black market vaccine schemes Read More »
One of the lingering impacts of the COVID-19 pandemic is the havoc it has wreaked on the global supply chain. There have been extreme fluctuations in the availability of goods, ports around the world are severely backlogged with full containers, and shipping and logistics companies are having trouble finding workers to transport cargo. It is …
Cybercrime underground flush with shipping companies’… Read More »
Cryptocurrency is a cybercriminal’s best friend. Actors all over the world have leveraged this technology’s increased anonymity to buy and sell illegal goods, services, stolen data, underground infrastructure and force victims to pay ransom. While blockchain analysis enables researchers and law enforcement to glean information from illicit transactions, criminals have countered by adopting the use …
How cryptomixers allow cybercriminals to clean their… Read More »
Months after law enforcement agencies took down the notorious Emotet botnet, Intel 471 observed the Trickbot banking trojan downloading and executing possible updated Emotet binaries. This marks the first time we observed Emotet malware activity after the takedown was announced in January. Bots associated with Trickbot, tagged several different gtags (lip125, fat2, top118 and others), …
Last month, Intel 471 observed the emergence of Emotet, a notorious strain of malware that had been dormant for most of 2021 after law enforcement agencies forced it offline. We wrote in January that “Only time will tell if the takedown will have a long-term impact on Emotet operations. The groups who run these botnets …
How the new Emotet differs from previous versions Read More »
There’s been a shift in the ransomware-as-a-service ecosystem. Be it due to law enforcement, infighting amongst groups or people abandoning variants altogether, the RaaS groups dominating the ecosystem at this point in time are completely different than just a few months ago. Yet, even with the shift in the variants, ransomware incidents as a whole …
A reset on ransomware: Dominant variants differ from… Read More »
The Log4j vulnerability has rocked the IT world, with the vast majority of tech teams consumed with trying to gauge how it impacts their organizations. The popular logging tool is used in tens of thousands of software packages, so assessing the damage that could be inflicted by exploiting the vulnerability is an extremely tall task …
Here’s how the cybercriminal underground has reacted… Read More »
We develop lots of different Android apps at Yalantis, and our experience shows that almost every application we deal with needs image cropping functionality. Image cropping can be used for various purposes, from ordinary adjustment of user profile images to more complex features that involve aspect ratio cropping and flexible image transformations. Since we want …
Introducing uCrop, Our Own Image Cropping Library for Android Read More »
Some time ago we created an open-source image cropping library for Android. uCrop is a convenient tool for cropping photos that you can use for your project. Since its creation, the tool has received much attention from the GitHub community and has reached a leading position in the GitHub trending repositories list. As of September 14, 2020, there …
How We Created uCrop, Our Own Image Cropping Library for Android Read More »
Yalantis has released several apps with audio recording functionality. Halaa – Instagram for voice and video is the latest example of our work with audio technologies. Every time we want to add some cool visualization for music, however, we have to deal with a lot of issues. First, there are no simple and convenient Android …
Introducing Horizon, Our Open Source Library for Sound Visualization Read More »
Machine learning has been used for years to offer image recognition, spam detection, natural speech comprehension, product recommendations, and medical diagnoses. Today, machine learning algorithms can help us enhance cybersecurity, ensure public safety, and improve medical outcomes. Machine learning systems can also make customer service better and automobiles safer. When I started experimenting with machine …
Using Machine Learning Algorithm for Predicting House Valuations Read More »
With iOS 10, Apple expanded Siri’s capabilities to third-party apps. Now you can enhance your own apps with voice commands to provide your users with bot-style interactions. We’ve just finished developing an iOS application for one of our clients that integrates with Siri. The app allows clients of a consulting company consult with their managers …
This post is for developers who want to get started with Android NDK and want to know all the niceties of using it for developing in Kotlin. To see the whole picture, I suggest we start with the theoretical part. Then we’ll proceed to the practical part, with a detailed sample project written in Kotlin. …
How to Use the Android NDK When Writing an App in Kotlin Read More »
FFmpeg is a robust open-source framework designed for command-line-based processing of video and audio files, and widely used for format transcoding, basic editing (trimming and concatenation), video scaling, video post-production effects, and standards compliance. To date, it remains one of the commonly used solutions for processing videos on Ruby on Rails. Frei0r, in turn, is an …
What You Can Create with FFmpeg Filters and Frei0r Plugin Effects Read More »