corpus.blog
41554 blogs · [ { "id": "01a07df3-579b-728b-a106-ba300328bec4", "title": "Hunting for Threats: The Importance of the Human Touch in Cybersecurity", "url": "https://www.intel471.com/blog/hunting-for-threats-the-importance-of-the-human-touch-in-cybersecurity", "published_at": "2023-01-11T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3003521c8e", "title": "Why Behaviors Matter in Threat Hunting", "url": "https://www.intel471.com/blog/why-behaviors-matter-in-threat-hunting", "published_at": "2023-01-04T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3003a2426b", "title": "Twitter’s Leaky API: Who Does it Impact, Why Does it Matter", "url": "https://www.intel471.com/blog/twitters-leaky-api-who-does-it-impact-why-does-it-matter", "published_at": "2022-12-14T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3003c41184", "title": "The 80 Best Cyber Security YouTube Channels", "url": "https://www.intel471.com/blog/the-80-best-cybersecurity-youtube-channels", "published_at": "2022-12-14T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300457d0c0", "title": "Countering One-Time Password Bots", "url": "https://www.intel471.com/blog/countering-one-time-password-bots", "published_at": "2022-12-07T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3004ef1adc", "title": "Threat Hunting Should Become a Standard Requirement", "url": "https://www.intel471.com/blog/threat-hunting-should-become-a-standard-requirement", "published_at": "2022-12-01T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30051325f2", "title": "A Primer on Zero-Day Vulnerabilities", "url": "https://www.intel471.com/blog/zero-day-vulnerabilities-a-primer", "published_at": "2022-12-01T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3005aa6a35", "title": "A Product Roadmap for Cybercrime", "url": "https://www.intel471.com/blog/product-roadmap-for-cybercrime", "published_at": "2022-11-23T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3005f136e5", "title": "A Theoretically Devastating Cyber Attack on America’s Gas Stations", "url": "https://www.intel471.com/blog/a-theoretically-devastating-cyber-attack-on-americas-gas-stations", "published_at": "2022-11-10T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30067a1884", "title": "Denial-of-Service in the Cyber Underground", "url": "https://www.intel471.com/blog/denial-of-service-in-the-cyber-underground", "published_at": "2022-11-09T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300716d195", "title": "Intel 471's Overview of Ransomware Activity Through Q3 2022", "url": "https://www.intel471.com/blog/intel-471s-overview-of-ransomware-activity-through-q3-2022", "published_at": "2022-11-04T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3007c2abc6", "title": "The No-Nonsense Benefits of Threat Hunting", "url": "https://www.intel471.com/blog/the-no-nonsense-benefits-of-threat-hunting", "published_at": "2022-11-03T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3007dce7ff", "title": "Text4Shell (CVE-2022-42889) Vulnerability", "url": "https://www.intel471.com/blog/text4shell-vulnerability", "published_at": "2022-11-03T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3008339893", "title": "Intel 471 Acquires SpiderFoot", "url": "https://www.intel471.com/blog/intel-471-acquires-spiderfoot", "published_at": "2022-11-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3008daadb6", "title": "Russian-speaking actors offer unique perspectives on Putin's military mobilization", "url": "https://www.intel471.com/blog/russian-speaking-actors-offer-unique-perspectives-on-putins-military-mobilization", "published_at": "2022-10-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3008f733ab", "title": "Threat Hunting Interview Questions: The Top 10 for 2022!", "url": "https://www.intel471.com/blog/top-10-threat-hunting-interview-questions-for-2022", "published_at": "2022-10-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30097f2988", "title": "Venus Ransomware", "url": "https://www.intel471.com/blog/venus-ransomware", "published_at": "2022-10-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3009b8b054", "title": "Pro-Russian Hacktivism and Its Role in the War in Ukraine", "url": "https://www.intel471.com/blog/pro-russian-hacktivism-and-its-role-in-the-war-in-ukraine", "published_at": "2022-10-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300aab10c0", "title": "LockBit 3.0 Builder Code Leak Points to Another Disgruntled Criminal Employee", "url": "https://www.intel471.com/blog/lockbit-3-0-builder-code-leak-points-to-another-disgruntled-criminal-employee", "published_at": "2022-10-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300b4e3808", "title": "Cyber Underground Marketplace Intelligence: A New Offering from Intel 471 to Help Anticipate Future Threats", "url": "https://www.intel471.com/blog/cyber-underground-marketplace-intelligence-a-new-offering-from-intel-471-to-help-anticipate-future-threats", "published_at": "2022-10-05T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300c13e384", "title": "ProxyNotShell - CVE-2022-40140 & CVE-2022-41082", "url": "https://www.intel471.com/blog/proxynotshell", "published_at": "2022-09-30T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300c2472fa", "title": "Authentication Token Vulnerability with Microsoft Teams", "url": "https://www.intel471.com/blog/micrososft-teams-vulnerability-authentication-token", "published_at": "2022-09-27T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300c383613", "title": "No Protection Against Nation-State", "url": "https://www.intel471.com/blog/no-protection-against-nation-state", "published_at": "2022-09-22T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300cd94319", "title": "How Threat Actors Use Underground Marketplaces", "url": "https://www.intel471.com/blog/how-threat-actors-use-underground-marketplaces", "published_at": "2022-09-22T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300dc608af", "title": "Emotet Malware Update and Development", "url": "https://www.intel471.com/blog/emotet-malware-update-and-development", "published_at": "2022-09-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300dfa9ca5", "title": "Pro-Russian Hacktivist Groups Target Ukraine Supporters", "url": "https://www.intel471.com/blog/pro-russian-hacktivist-groups-target-ukraine-supporters", "published_at": "2022-09-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300e14acb0", "title": "Red Team Tools: Hunting for the Top 3 Tools", "url": "https://www.intel471.com/blog/red-team-tools-hunting-for-the-top-3-tools", "published_at": "2022-09-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300ef471b9", "title": "Conti vs. Monti: A Reinvention or Just a Simple Rebranding?", "url": "https://www.intel471.com/blog/conti-vs-monti-a-reinvention-or-just-a-simple-rebranding", "published_at": "2022-09-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300f8366a0", "title": "How OSINT Can Be Used to Elevate DFIR", "url": "https://www.intel471.com/blog/how-osint-can-be-used-to-elevate-dfir", "published_at": "2022-09-05T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba300fba188a", "title": "Threat Hunting Program: 5 Best Practices for Success", "url": "https://www.intel471.com/blog/threat-hunting-program-5-best-practices-for-success", "published_at": "2022-09-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3010ac1a90", "title": "ERMAC 2.0: Perfecting the Art of Account Takeover", "url": "https://www.intel471.com/blog/rmac-2-0-perfecting-the-art-of-account-takeover", "published_at": "2022-08-31T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301174a0e2", "title": "Bumblebee Loader", "url": "https://www.intel471.com/blog/bumblebee-loader", "published_at": "2022-08-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301181fbc0", "title": "Five takeaways from Intel 471’s first Annual Threat Report", "url": "https://www.intel471.com/blog/five-takeaways-from-intel-471s-first-annual-threat-report", "published_at": "2022-08-24T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30120304e8", "title": "Here’s how to use Intel 471 with existing intelligence frameworks", "url": "https://www.intel471.com/blog/how-to-use-intel-471-with-existing-intelligence-frameworks", "published_at": "2022-08-24T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3012e683c1", "title": "Discovering the Infrastructure of an iCloud Phishing Scam", "url": "https://www.intel471.com/blog/discovering-the-infrastructure-of-an-icloud-phishing-scam", "published_at": "2022-08-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30135570d8", "title": "Red Team Tools", "url": "https://www.intel471.com/blog/red-team-tools", "published_at": "2022-08-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30142f6a5e", "title": "Using SpiderFoot for Offensive Reconnaissance: Part 2 – Validation", "url": "https://www.intel471.com/blog/using-spiderfoot-for-offensive-reconnaissance-part-2-validation", "published_at": "2022-08-05T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30151cd441", "title": "Why cybercriminals are flocking to Telegram", "url": "https://www.intel471.com/blog/why-cybercriminals-are-flocking-to-telegram", "published_at": "2022-08-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30157f3e02", "title": "How cybercriminals are using messaging apps to launch malware schemes", "url": "https://www.intel471.com/blog/how-cybercriminals-are-using-messaging-apps-to-launch-malware-schemes", "published_at": "2022-07-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301653c311", "title": "Using cybercrime as cover: How Conti operators are lying low", "url": "https://www.intel471.com/blog/using-cybercrime-as-cover-how-conti-operators-are-lying-low", "published_at": "2022-07-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30174ea29b", "title": "Why organizations should (and should not) worry about KillNet", "url": "https://www.intel471.com/blog/killnet-xaknet-legion-ddos-attacks", "published_at": "2022-07-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3017b6824c", "title": "Proactive Security and Why Every Business Needs It... Yesterday", "url": "https://www.intel471.com/blog/proactive-security-and-why-every-business-needs-it-yesterday", "published_at": "2022-07-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3017d4a136", "title": "Using SpiderFoot for Offensive Reconnaissance: Part 1 – Discovery", "url": "https://www.intel471.com/blog/using-spiderfoot-for-offensive-reconnaissance-part-1-discovery", "published_at": "2022-06-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30187f87ec", "title": "The 7 common traits among highly-successful cybercriminals: Part II", "url": "https://www.intel471.com/blog/cybercriminals-common-traits-part-2", "published_at": "2022-06-28T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301954e93c", "title": "The 7 common traits among highly successful cybercriminals: Part I", "url": "https://www.intel471.com/blog/cybercriminals-common-traits-part-1", "published_at": "2022-06-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3019ca9668", "title": "Qakbot", "url": "https://www.intel471.com/blog/qakbot", "published_at": "2022-06-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3019d9002b", "title": "Cybercriminals preying on travel surge with a host of different scams", "url": "https://www.intel471.com/blog/travel-fraud-cybercrime-ransomware-pii", "published_at": "2022-06-15T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3019f210fc", "title": "MSPs Have Unique Advantages in Threat Hunting - Strength in Numbers", "url": "https://www.intel471.com/blog/msps-have-unique-advantages-in-threat-hunting-strength-in-numbers", "published_at": "2022-06-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301aa08bff", "title": "Follina Vulnerability - CVE-2022-30190", "url": "https://www.intel471.com/blog/follina-vulnerability-cve-2022-30190", "published_at": "2022-06-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301aa19ac6", "title": "The relationship between access brokers and ransomware crews is growing", "url": "https://www.intel471.com/blog/access-brokers-ransomware-relationship-growing", "published_at": "2022-06-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301ab83806", "title": "How to Prevent Ransomware: 5 Common Behaviors to Hunt", "url": "https://www.intel471.com/blog/how-to-prevent-ransomware-5-common-behaviors-to-hunt", "published_at": "2022-06-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301ae4e5ee", "title": "6 Threat Hunting Ideas You Can Use Today!", "url": "https://www.intel471.com/blog/6-threat-hunting-ideas-you-can-use-today", "published_at": "2022-05-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301b9b884a", "title": "Threat Hunting Hypothesis Examples: Five Hunts to Start Out", "url": "https://www.intel471.com/blog/threat-hunting-hypothesis-examples-five-hunts-to-start-out", "published_at": "2022-05-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301c732d86", "title": "What malware to look for if you want to prevent a ransomware attack", "url": "https://www.intel471.com/blog/malware-before-ransomware-trojan-information-stealer-cobalt-strike", "published_at": "2022-05-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301d2916b1", "title": "5 Threat Hunting Tips from a Seasoned Hunt Team", "url": "https://www.intel471.com/blog/5-threat-hunting-tips-from-a-seasoned-hunt-team", "published_at": "2022-05-11T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301e17f5ee", "title": "Quantum Ransomware", "url": "https://www.intel471.com/blog/quantum-ransomware", "published_at": "2022-05-10T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301e57957e", "title": "BlackCat Ransomware", "url": "https://www.intel471.com/blog/blackcat-ransomware", "published_at": "2022-05-10T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301f17e830", "title": "Cybercrime loves company: Conti cooperated with other ransomware gangs", "url": "https://www.intel471.com/blog/conti-ransomware-cooperation-maze-lockbit-ragnar-locker", "published_at": "2022-05-05T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301fc6683d", "title": "Cyber Threat Hunting - What Is It, Really?", "url": "https://www.intel471.com/blog/cyber-threat-hunting-what-is-it-really", "published_at": "2022-05-04T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba301fec4a73", "title": "Tarrask Malware", "url": "https://www.intel471.com/blog/tarrask-malware", "published_at": "2022-04-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3020803a77", "title": "Conti and Emotet: A constantly destructive duo", "url": "https://www.intel471.com/blog/conti-emotet-ransomware-conti-leaks", "published_at": "2022-04-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30214e19a7", "title": "Threat Hunting Certification, Courses, and Materials: A Starting Guide", "url": "https://www.intel471.com/blog/threat-hunting-certification-courses-and-materials-a-starting-guide", "published_at": "2022-04-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3021fcc9dd", "title": "All the OSINT You Can Get From a Single Webpage Request", "url": "https://www.intel471.com/blog/all-the-osint-you-can-get-from-a-single-webpage-request", "published_at": "2022-04-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30220258da", "title": "Move fast and commit crimes: Conti’s development teams mirror corporate tech", "url": "https://www.intel471.com/blog/conti-leaks-ransomware-development", "published_at": "2022-04-05T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30220b8493", "title": "Spring4Shell: CVE-2022-22965", "url": "https://www.intel471.com/blog/spring4shell-cve-2022-22965", "published_at": "2022-04-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3022f40edb", "title": "Source code leaks a key cog in malware development life cycle", "url": "https://www.intel471.com/blog/malware-source-code-leak-history", "published_at": "2022-03-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302305047a", "title": "5 Python Libraries for Automating OSINT Operations", "url": "https://www.intel471.com/blog/python-libraries-for-osint-automation", "published_at": "2022-03-24T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30238430aa", "title": "Conti puts the ‘organized’ in organized crime", "url": "https://www.intel471.com/blog/conti-leaks-cybercrime-fire-team", "published_at": "2022-03-23T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3023dab1c2", "title": "Moving the Needle Forward on Threat Hunting", "url": "https://www.intel471.com/blog/moving-the-needle-forward-on-threat-hunting", "published_at": "2022-03-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30240e0c3b", "title": "How HUNTER Helps Security Teams", "url": "https://www.intel471.com/blog/how-hunter-helps-security-teams", "published_at": "2022-03-18T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30241ca22b", "title": "6 More Threat Hunting Tools Everyone in the Industry Should Be Using!", "url": "https://www.intel471.com/blog/6-more-threat-hunting-tools-everyone-in-the-industry-should-be-using", "published_at": "2022-03-17T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302432a615", "title": "CONTI Ransomware", "url": "https://www.intel471.com/blog/conti", "published_at": "2022-03-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3024dfbe1a", "title": "Cyber Threat Hunting: 4 More Videos to Make You an (Even) Better Threat Hunter!", "url": "https://www.intel471.com/blog/cyber-threat-hunting-4-more-videos-to-make-you-an-even-better-threat-hunter", "published_at": "2022-03-10T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302547c874", "title": "Biometric security beginning to pique cybercriminals’ interest", "url": "https://www.intel471.com/blog/biometric-security-threats-cybercriminal-underground", "published_at": "2022-03-08T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30257ef192", "title": "Something strange is going on with Trickbot", "url": "https://www.intel471.com/blog/trickbot-2022-emotet-bazar-loader", "published_at": "2022-02-24T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302668f863", "title": "HermeticWiper Malware", "url": "https://www.intel471.com/blog/hermeticwiper", "published_at": "2022-02-24T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30271b0f61", "title": "LockBit Ransomware", "url": "https://www.intel471.com/blog/lockbit", "published_at": "2022-02-18T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30278d551a", "title": "Proxy VBScript Execution via CurrentVersion Registry Key", "url": "https://www.intel471.com/blog/proxy-vbscript-execution-via-currentversion-registry-key", "published_at": "2022-02-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30279d337b", "title": "How the Russia-Ukraine conflict is impacting cybercrime", "url": "https://www.intel471.com/blog/russia-ukraine-conflict-cybercrime-underground", "published_at": "2022-02-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302808d35a", "title": "BlackByte Ransomware", "url": "https://www.intel471.com/blog/blackbyte", "published_at": "2022-02-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302880ad93", "title": "PrivateLoader: The first step in many malware schemes", "url": "https://www.intel471.com/blog/privateloader-malware", "published_at": "2022-02-08T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30297f19e7", "title": "OSINT without APIs", "url": "https://www.intel471.com/blog/osint-without-apis", "published_at": "2022-02-06T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302a2c3f84", "title": "Why Mirai is still a threat to the IoT ecosystem", "url": "https://www.intel471.com/blog/iot-cybersecurity-threats-mirai-botnet", "published_at": "2022-01-25T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302a62680a", "title": "What can we expect from the REvil arrests?", "url": "https://www.intel471.com/blog/revil-ransomware-arrests-cybercrime-underground", "published_at": "2022-01-24T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302ac55de4", "title": "WhisperGate Wiper", "url": "https://www.intel471.com/blog/whispergate", "published_at": "2022-01-18T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302acf3d1a", "title": "SysJoker Backdoor", "url": "https://www.intel471.com/blog/sysjoker", "published_at": "2022-01-13T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302b58e00d", "title": "Critical CVEs: Why Chasing Squirrels is Driving the Whole Industry Nuts", "url": "https://www.intel471.com/blog/critical-cves-why-chasing-squirrels-is-driving-the-whole-industry-nuts", "published_at": "2022-01-06T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302bdcb0b9", "title": "Here’s how the cybercriminal underground has reacted to Log4j", "url": "https://www.intel471.com/blog/log4j-cybercrime", "published_at": "2021-12-22T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302c439b4a", "title": "Log4j: Making the Case for Structured Hunting", "url": "https://www.intel471.com/blog/log4j-making-the-case-for-structured-hunting", "published_at": "2021-12-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302cb09f3d", "title": "A reset on ransomware: Dominant variants differ from prior years", "url": "https://www.intel471.com/blog/ransomware-attacks-2021-lockbit-hive-conti-clop-revil-blackmatter", "published_at": "2021-12-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302cbf8c80", "title": "Log4Shell: CVE-2021-44228", "url": "https://www.intel471.com/blog/log4shell", "published_at": "2021-12-12T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302d7b4bf4", "title": "How the new Emotet differs from previous versions", "url": "https://www.intel471.com/blog/emotet-returns-december-2021", "published_at": "2021-12-08T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302e54efce", "title": "InstallerFileTakeOver Exploit: CVE-2021-41379", "url": "https://www.intel471.com/blog/installerfiletakeover-exploit-cve-2021-41379", "published_at": "2021-12-01T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302e59d787", "title": "Trickbot Banking Trojan", "url": "https://www.intel471.com/blog/trickbot-banking-trojan", "published_at": "2021-11-30T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302e9d4888", "title": "An OSINT Story: It’s late Friday evening…", "url": "https://www.intel471.com/blog/an-osint-story-its-late-friday-evening", "published_at": "2021-11-25T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302f2ce0a0", "title": "Windows Discovery and Execution Processes - Excessive Use", "url": "https://www.intel471.com/blog/windows-discovery-and-execution-processes-excessive-use", "published_at": "2021-11-18T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302f9fc301", "title": "Emotet Malware", "url": "https://www.intel471.com/blog/emotet", "published_at": "2021-11-17T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba302fa3f780", "title": "Emotet is back. Here's what we know.", "url": "https://www.intel471.com/blog/emotet-is-back-2021", "published_at": "2021-11-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3030062eb3", "title": "Maldoc Execution Chain", "url": "https://www.intel471.com/blog/maldoc-execution-chain", "published_at": "2021-11-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303040677a", "title": "DeadRinger Operation", "url": "https://www.intel471.com/blog/deadringer-operation", "published_at": "2021-11-15T18:00:00+00:00" } ] posts Claim your blog
Back to Intel 471
Blog · corpus.blog/blogs/intel471.com/posts

Intel 471

intel471.com

2023

Hunting for Threats: The Importance of the Human Touch in Cybersecurityoriginal ↗
11 Jan 2023
Why Behaviors Matter in Threat Huntingoriginal ↗
4 Jan 2023

2022

Twitter’s Leaky API: Who Does it Impact, Why Does it Matteroriginal ↗
14 Dec 2022
The 80 Best Cyber Security YouTube Channelsoriginal ↗
14 Dec 2022
Countering One-Time Password Botsoriginal ↗
7 Dec 2022
Threat Hunting Should Become a Standard Requirementoriginal ↗
1 Dec 2022
A Primer on Zero-Day Vulnerabilitiesoriginal ↗
1 Dec 2022
A Product Roadmap for Cybercrimeoriginal ↗
23 Nov 2022
A Theoretically Devastating Cyber Attack on America’s Gas Stationsoriginal ↗
10 Nov 2022
Denial-of-Service in the Cyber Undergroundoriginal ↗
9 Nov 2022
Intel 471's Overview of Ransomware Activity Through Q3 2022original ↗
4 Nov 2022
The No-Nonsense Benefits of Threat Huntingoriginal ↗
3 Nov 2022
Text4Shell (CVE-2022-42889) Vulnerabilityoriginal ↗
3 Nov 2022
Intel 471 Acquires SpiderFootoriginal ↗
2 Nov 2022
Russian-speaking actors offer unique perspectives on Putin's military mobilizationoriginal ↗
26 Oct 2022
Threat Hunting Interview Questions: The Top 10 for 2022!original ↗
20 Oct 2022
Venus Ransomwareoriginal ↗
20 Oct 2022
Pro-Russian Hacktivism and Its Role in the War in Ukraineoriginal ↗
19 Oct 2022
LockBit 3.0 Builder Code Leak Points to Another Disgruntled Criminal Employeeoriginal ↗
12 Oct 2022
Cyber Underground Marketplace Intelligence: A New Offering from Intel 471 to Help Anticipate Future Threatsoriginal ↗
5 Oct 2022
ProxyNotShell - CVE-2022-40140 & CVE-2022-41082original ↗
30 Sept 2022
Authentication Token Vulnerability with Microsoft Teamsoriginal ↗
27 Sept 2022
No Protection Against Nation-Stateoriginal ↗
22 Sept 2022
How Threat Actors Use Underground Marketplacesoriginal ↗
22 Sept 2022
Emotet Malware Update and Developmentoriginal ↗
20 Sept 2022
Pro-Russian Hacktivist Groups Target Ukraine Supportersoriginal ↗
14 Sept 2022
Red Team Tools: Hunting for the Top 3 Toolsoriginal ↗
8 Sept 2022
Conti vs. Monti: A Reinvention or Just a Simple Rebranding?original ↗
7 Sept 2022
How OSINT Can Be Used to Elevate DFIRoriginal ↗
5 Sept 2022
Threat Hunting Program: 5 Best Practices for Successoriginal ↗
1 Sept 2022
ERMAC 2.0: Perfecting the Art of Account Takeoveroriginal ↗
31 Aug 2022
Bumblebee Loaderoriginal ↗
29 Aug 2022
Five takeaways from Intel 471’s first Annual Threat Reportoriginal ↗
24 Aug 2022
Here’s how to use Intel 471 with existing intelligence frameworksoriginal ↗
24 Aug 2022
Discovering the Infrastructure of an iCloud Phishing Scamoriginal ↗
21 Aug 2022
Red Team Toolsoriginal ↗
7 Aug 2022
Using SpiderFoot for Offensive Reconnaissance: Part 2 – Validationoriginal ↗
5 Aug 2022
Why cybercriminals are flocking to Telegramoriginal ↗
2 Aug 2022
How cybercriminals are using messaging apps to launch malware schemesoriginal ↗
26 Jul 2022
Using cybercrime as cover: How Conti operators are lying loworiginal ↗
19 Jul 2022
Why organizations should (and should not) worry about KillNetoriginal ↗
12 Jul 2022
Proactive Security and Why Every Business Needs It... Yesterdayoriginal ↗
7 Jul 2022
Using SpiderFoot for Offensive Reconnaissance: Part 1 – Discoveryoriginal ↗
29 Jun 2022
The 7 common traits among highly-successful cybercriminals: Part IIoriginal ↗
28 Jun 2022
The 7 common traits among highly successful cybercriminals: Part Ioriginal ↗
21 Jun 2022
Qakbotoriginal ↗
21 Jun 2022
Cybercriminals preying on travel surge with a host of different scamsoriginal ↗
15 Jun 2022
MSPs Have Unique Advantages in Threat Hunting - Strength in Numbersoriginal ↗
9 Jun 2022
Follina Vulnerability - CVE-2022-30190original ↗
8 Jun 2022
The relationship between access brokers and ransomware crews is growingoriginal ↗
2 Jun 2022
How to Prevent Ransomware: 5 Common Behaviors to Huntoriginal ↗
2 Jun 2022
6 Threat Hunting Ideas You Can Use Today!original ↗
26 May 2022
Threat Hunting Hypothesis Examples: Five Hunts to Start Outoriginal ↗
19 May 2022
What malware to look for if you want to prevent a ransomware attackoriginal ↗
12 May 2022
5 Threat Hunting Tips from a Seasoned Hunt Teamoriginal ↗
11 May 2022
Quantum Ransomwareoriginal ↗
10 May 2022
BlackCat Ransomwareoriginal ↗
10 May 2022
Cybercrime loves company: Conti cooperated with other ransomware gangsoriginal ↗
5 May 2022
Cyber Threat Hunting - What Is It, Really?original ↗
4 May 2022
Tarrask Malwareoriginal ↗
29 Apr 2022
Conti and Emotet: A constantly destructive duooriginal ↗
26 Apr 2022
Threat Hunting Certification, Courses, and Materials: A Starting Guideoriginal ↗
21 Apr 2022
All the OSINT You Can Get From a Single Webpage Requestoriginal ↗
20 Apr 2022
Move fast and commit crimes: Conti’s development teams mirror corporate techoriginal ↗
5 Apr 2022
Spring4Shell: CVE-2022-22965original ↗
1 Apr 2022
Source code leaks a key cog in malware development life cycleoriginal ↗
29 Mar 2022
5 Python Libraries for Automating OSINT Operationsoriginal ↗
24 Mar 2022
Conti puts the ‘organized’ in organized crimeoriginal ↗
23 Mar 2022
Moving the Needle Forward on Threat Huntingoriginal ↗
21 Mar 2022
How HUNTER Helps Security Teamsoriginal ↗
18 Mar 2022
6 More Threat Hunting Tools Everyone in the Industry Should Be Using!original ↗
17 Mar 2022
CONTI Ransomwareoriginal ↗
14 Mar 2022
Cyber Threat Hunting: 4 More Videos to Make You an (Even) Better Threat Hunter!original ↗
10 Mar 2022
Biometric security beginning to pique cybercriminals’ interestoriginal ↗
8 Mar 2022
Something strange is going on with Trickbotoriginal ↗
24 Feb 2022
HermeticWiper Malwareoriginal ↗
24 Feb 2022
LockBit Ransomwareoriginal ↗
18 Feb 2022
Proxy VBScript Execution via CurrentVersion Registry Keyoriginal ↗
16 Feb 2022
How the Russia-Ukraine conflict is impacting cybercrimeoriginal ↗
15 Feb 2022
BlackByte Ransomwareoriginal ↗
15 Feb 2022
PrivateLoader: The first step in many malware schemesoriginal ↗
8 Feb 2022
OSINT without APIsoriginal ↗
6 Feb 2022
Why Mirai is still a threat to the IoT ecosystemoriginal ↗
25 Jan 2022
What can we expect from the REvil arrests?original ↗
24 Jan 2022
WhisperGate Wiperoriginal ↗
18 Jan 2022
SysJoker Backdoororiginal ↗
13 Jan 2022
Critical CVEs: Why Chasing Squirrels is Driving the Whole Industry Nutsoriginal ↗
6 Jan 2022

2021

Here’s how the cybercriminal underground has reacted to Log4joriginal ↗
22 Dec 2021
Log4j: Making the Case for Structured Huntingoriginal ↗
16 Dec 2021
A reset on ransomware: Dominant variants differ from prior yearsoriginal ↗
15 Dec 2021
Log4Shell: CVE-2021-44228original ↗
12 Dec 2021
How the new Emotet differs from previous versionsoriginal ↗
8 Dec 2021
InstallerFileTakeOver Exploit: CVE-2021-41379original ↗
1 Dec 2021
Trickbot Banking Trojanoriginal ↗
30 Nov 2021
An OSINT Story: It’s late Friday evening…original ↗
25 Nov 2021
Windows Discovery and Execution Processes - Excessive Useoriginal ↗
18 Nov 2021
Emotet Malwareoriginal ↗
17 Nov 2021
Emotet is back. Here's what we know.original ↗
16 Nov 2021
Maldoc Execution Chainoriginal ↗
16 Nov 2021
DeadRinger Operationoriginal ↗
15 Nov 2021
Previous Next