41554 blogs · [ { "id": "01a07df3-579b-728b-a106-ba303136ae9e", "title": "How cryptomixers allow cybercriminals to clean their ransoms", "url": "https://www.intel471.com/blog/cryptomixers-ransomware", "published_at": "2021-11-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3031639993", "title": "Macaw Ransomware", "url": "https://www.intel471.com/blog/macaw-ransomware", "published_at": "2021-11-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3032314ae7", "title": "Cybercrime underground flush with shipping companies’ credentials", "url": "https://www.intel471.com/blog/shipping-companies-ransomware-credentials", "published_at": "2021-11-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3032bfc5c0", "title": "Top 5 OSINT Sources for Attack Surface Management", "url": "https://www.intel471.com/blog/top-5-osint-sources-for-attack-surface-management", "published_at": "2021-10-25T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30333b2ff5", "title": "Top 5 OSINT Sources for People Investigations", "url": "https://www.intel471.com/blog/top-5-osint-sources-for-people-investigations", "published_at": "2021-10-24T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30341313c7", "title": "Cybercriminals cash in on black market vaccine schemes", "url": "https://www.intel471.com/blog/fake-covid-vaccination-cards-cybercrime", "published_at": "2021-10-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30348d9d0e", "title": "Top 5 OSINT Sources for Threat Intelligence", "url": "https://www.intel471.com/blog/top-5-osint-sources-for-threat-intelligence", "published_at": "2021-10-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30355e3c30", "title": "The public sector is a juicy target for cybercriminals", "url": "https://www.intel471.com/blog/public-sector-cybersecurity-threats-2021", "published_at": "2021-09-30T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3035ace5a3", "title": "Cybercriminals going after one-time passwords with Telegram-powered bots", "url": "https://www.intel471.com/blog/otp-password-bots-telegram", "published_at": "2021-09-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3035d82b3c", "title": "Manufacturers should focus on protecting their supply chains", "url": "https://www.intel471.com/blog/manufacturing-cybersecurity-threats-supply-chain", "published_at": "2021-09-22T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30368ba6c0", "title": "Top 5 OSINT Sources for Penetration Testing and Bug Bounties", "url": "https://www.intel471.com/blog/top-5-osint-sources-for-penetration-testing-and-bug-bounties", "published_at": "2021-09-11T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3036f3cbe8", "title": "njRAT Remote Access Trojan", "url": "https://www.intel471.com/blog/njrat", "published_at": "2021-09-10T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3037dfeb9b", "title": "How Groove Gang is shaking up the Ransomware-as-a-Service Market to Empower Affiliates", "url": "https://www.intel471.com/blog/groove-gang-ransomware-babuk-revil-blackmatter", "published_at": "2021-09-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30383a7bd1", "title": "The Threat Hunting Conundrum: Challenges Security Teams Face", "url": "https://www.intel471.com/blog/the-threat-hunting-conundrum-challenges-security-teams-face", "published_at": "2021-09-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3038a690b5", "title": "Expectation vs Reality: Debunking 5 (More) Myths About Threat Hunting", "url": "https://www.intel471.com/blog/expectation-vs-reality-debunking-5-more-threat-hunters", "published_at": "2021-09-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3038c027a6", "title": "Outsourcing manipulation: How BEC scammers use the cybercrime underground", "url": "https://www.intel471.com/blog/bec-cybercrime-underground", "published_at": "2021-09-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3038cc07f1", "title": "Attack Surface Management: You’re probably doing it wrong", "url": "https://www.intel471.com/blog/attack-surface-management-youre-probably-doing-it-wrong", "published_at": "2021-08-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3039902a39", "title": "From a Global Man Hunt to a Cyber Threat Hunt", "url": "https://www.intel471.com/blog/from-a-global-man-hunt-to-a-cyber-threat-hunt", "published_at": "2021-08-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3039bf4f91", "title": "Here’s how to guard your enterprise against ShinyHunters", "url": "https://www.intel471.com/blog/shinyhunters-data-breach-mitre-attack", "published_at": "2021-08-23T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303a7fbb28", "title": "Logs & You: Explaining Threat Hunting to Non-Threat Hunters", "url": "https://www.intel471.com/blog/logs-you-create-and-why-they-matter", "published_at": "2021-08-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303b07fb9f", "title": "Here’s how information stealers pose a threat beyond ransomware", "url": "https://www.intel471.com/blog/information-stealer-ransomware-account-takeover", "published_at": "2021-08-18T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303b290a12", "title": "Lock 'N' Load: A New LockBit Campaign", "url": "https://www.intel471.com/blog/lock-n-load-a-new-lockbit-campaign", "published_at": "2021-08-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303c089f3f", "title": "Three ways ransomware-as-a-service has become easier than ever to launch", "url": "https://www.intel471.com/blog/ransomware-as-a-service-fivehands-printnightmare-babuk-conti", "published_at": "2021-07-28T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303cd4b243", "title": "Cyber Threat Hunting: 3 MORE Videos to Help You Become an Expert", "url": "https://www.intel471.com/blog/cyber-threat-hunting-3-more-videos-to-help-you-become-an-expert", "published_at": "2021-07-22T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303db287a8", "title": "Meteor Wiper", "url": "https://www.intel471.com/blog/meteor-wiper", "published_at": "2021-07-16T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303e3b6607", "title": "Threat Content Platforms: Why We Need Them More Than Ever Before", "url": "https://www.intel471.com/blog/threat-content-platforms-why-we-need-them-more-than-ever-before-or-ttps-not-iocs", "published_at": "2021-07-15T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303ef79633", "title": "How cybercriminals create turbulence for the transportation industry", "url": "https://www.intel471.com/blog/how-cybercriminals-create-turbulence-for-the-transportation-industry", "published_at": "2021-07-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba303fb5e774", "title": "Proactive Threat Hunting Shouldn’t Just be a Buzzword", "url": "https://www.intel471.com/blog/proactive-threat-hunting-shouldnt-just-be-a-buzzword", "published_at": "2021-07-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3040586f7b", "title": "Sibot Malware", "url": "https://www.intel471.com/blog/sibot-malware", "published_at": "2021-06-24T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3040f561ca", "title": "Cybercriminals shop around for schemes targeting retail", "url": "https://www.intel471.com/blog/retail-cybercrime-threats-2021", "published_at": "2021-06-23T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30415b5277", "title": "TEARDROP Dropper Malware", "url": "https://www.intel471.com/blog/teardrop", "published_at": "2021-06-23T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3042122284", "title": "Attempted VBScript Stored in Non-Run CurrentVersion Registry Key Value", "url": "https://www.intel471.com/blog/attempted-vbscript-stored-in-non-run-currentversion-registry-key-value", "published_at": "2021-06-22T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304274292c", "title": "The blurry boundaries between nation-state actors and the cybercrime underground", "url": "https://www.intel471.com/blog/the-blurry-boundaries-between-nation-state-actors-and-the-cybercrime-underground", "published_at": "2021-06-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3043168a7a", "title": "How SOAR plus threat intelligence empowers security operations teams", "url": "https://www.intel471.com/blog/how-soar-plus-threat-intelligence-empowers-security-operations-teams", "published_at": "2021-06-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304316e94e", "title": "How much data do you leak online unintentionally?", "url": "https://www.intel471.com/blog/how-much-data-do-you-leak-online-unintentionally", "published_at": "2021-06-06T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304327b37a", "title": "BoomBox Downloader", "url": "https://www.intel471.com/blog/boombox-downloader", "published_at": "2021-06-04T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3043838015", "title": "Alleged REvil member says gang has no fear over U.S. government’s major ransomware focus", "url": "https://www.intel471.com/blog/alleged-revil-member-says-gang-has-no-fear-over-u-s-governments-major-ransomware-focus", "published_at": "2021-06-04T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30446d2e8e", "title": "Threat Hunt Deep Dives: User Account Control Bypass Via Registry Modification", "url": "https://www.intel471.com/blog/threat-hunt-deep-dives-user-account-control-bypass-via-registry-modification", "published_at": "2021-06-03T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304547bb49", "title": "Call for crimes? Russian-language forum runs contest for cryptocurrency hacks", "url": "https://www.intel471.com/blog/call-for-crimes-russian-language-forum-runs-contest-for-cryptocurrency-hacks", "published_at": "2021-06-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3045ff9eb8", "title": "The Easiest Way to (Hack|Protect) an Organization in 2021: Knowing the Attack Surface", "url": "https://www.intel471.com/blog/the-easiest-way-to-hack-protect-an-organization-in-2021-knowing-the-attack-surface", "published_at": "2021-06-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304646e321", "title": "Suspicious rundll32 Execution", "url": "https://www.intel471.com/blog/suspicious-rundll32-execution", "published_at": "2021-05-31T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30471e88f2", "title": "EnvyScout Dropper", "url": "https://www.intel471.com/blog/envyscout-dropper", "published_at": "2021-05-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30479ac38a", "title": "We Need a New National Cyber Security Strategy", "url": "https://www.intel471.com/blog/executive-order-we-need-a-new-national-cyber-security-strategy", "published_at": "2021-05-25T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304810f3c7", "title": "Look how many cybercriminals love Cobalt Strike", "url": "https://www.intel471.com/blog/cobalt-strike-cybercriminals-trickbot-qbot-hancitor", "published_at": "2021-05-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3048556da6", "title": "Cybercriminals have so many schemes aimed at your credentials", "url": "https://www.intel471.com/blog/credential-theft-cybercrime", "published_at": "2021-05-17T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304861a373", "title": "The moral underground? Ransomware operators retreat after Colonial Pipeline hack", "url": "https://www.intel471.com/blog/darkside-ransomware-shut-down-revil-avaddon-cybercrime", "published_at": "2021-05-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304960ea49", "title": "Here’s what we know about DarkSide ransomware", "url": "https://www.intel471.com/blog/darkside-ransomware-colonial-pipeline-attack", "published_at": "2021-05-10T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3049b99438", "title": "Ransomware: Hunting for Inhibiting System Backup or Recovery", "url": "https://www.intel471.com/blog/hunting-ransomware-inhibiting-system-backup-or-recovery", "published_at": "2021-05-06T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304a9c3eea", "title": "4 Ways Threat Hunting Helps Non-Traditional ROI", "url": "https://www.intel471.com/blog/4-ways-threat-hunting-helps-non-traditional-roi", "published_at": "2021-04-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304b08d621", "title": "The cybercriminal underground hasn’t forgotten about financial services", "url": "https://www.intel471.com/blog/financial-cybercrime-2021-jackpotting-atm-malware", "published_at": "2021-04-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304b5a8b49", "title": "Healthcare & Ransomware: A Different Type of Pandemic", "url": "https://www.intel471.com/blog/healthcare-ransomware-a-different-type-of-pandemic", "published_at": "2021-04-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304b8db759", "title": "How China’s cybercrime underground is making money off big data", "url": "https://www.intel471.com/blog/china-cybercrime-big-data-privacy-laws", "published_at": "2021-04-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304c4c69d9", "title": "Sodinokibi", "url": "https://www.intel471.com/blog/sodinokibi", "published_at": "2021-04-16T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304cd3eeea", "title": "Threat Content: Building a Better Mousetrap", "url": "https://www.intel471.com/blog/threat-content-building-a-better-mousetrap", "published_at": "2021-04-15T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304d229736", "title": "Blackmatter", "url": "https://www.intel471.com/blog/blackmatter", "published_at": "2021-04-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304dc141b8", "title": "Meterpreter Payload", "url": "https://www.intel471.com/blog/meterpreter-payload", "published_at": "2021-04-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304ea41d11", "title": "How to Threat Hunt: A Beginner's Guide", "url": "https://www.intel471.com/blog/how-to-threat-hunt-a-beginners-guide", "published_at": "2021-04-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304ee6cfd7", "title": "Cobalt Strike", "url": "https://www.intel471.com/blog/cobalt-strike", "published_at": "2021-04-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304fae0617", "title": "EtterSilent: the underground’s new favorite maldoc builder", "url": "https://www.intel471.com/blog/ettersilent-maldoc-builder-macro-trickbot-qbot", "published_at": "2021-04-06T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba304fc10828", "title": "Ryuk Ransomware", "url": "https://www.intel471.com/blog/ryuk-ransomware", "published_at": "2021-04-02T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305046e046", "title": "Threat Detection: 4 Little Changes That'll Make a Big Difference", "url": "https://www.intel471.com/blog/threat-detection-4-little-changes-thatll-make-a-big-difference", "published_at": "2021-04-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3051177d23", "title": "Pysa Ransomware", "url": "https://www.intel471.com/blog/pysa-ransomware", "published_at": "2021-03-24T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3051de789d", "title": "Living off the Land (LotL) - RDP Hijacking", "url": "https://www.intel471.com/blog/living-off-the-land-lotl-rdp-hijacking", "published_at": "2021-03-23T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305240a4e9", "title": "Cybercriminals still leveraging COVID-19 pandemic for scams", "url": "https://www.intel471.com/blog/covid-19-vaccine-scam-cybercrime-unemployment", "published_at": "2021-03-23T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30532dde25", "title": "A Threat Hunting Loop for Structured Hunting", "url": "https://www.intel471.com/blog/a-threat-hunting-loop-for-structured-hunting", "published_at": "2021-03-16T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30533825c2", "title": "You Don't Know the HAFNIUM of it...", "url": "https://www.intel471.com/blog/you-dont-know-the-hafnium-of-it", "published_at": "2021-03-11T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3053f82757", "title": "Living off the Land (LotL) - Downloading Files on Microsoft Windows", "url": "https://www.intel471.com/blog/living-off-the-land-downloading-files-on-microsoft-windows", "published_at": "2021-03-09T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3054a79dcd", "title": "Friendly fire: Four well-known cybercriminal forums dealing with breaches", "url": "https://www.intel471.com/blog/mazafaka-hacked-cybercrime-forums-exploit-crdclub-verified", "published_at": "2021-03-04T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3054e1672d", "title": "Threat Hunting Maturity Model: A New Approach for Structured Hunting", "url": "https://www.intel471.com/blog/threat-hunting-maturity-model-a-new-approach-for-structured-hunting", "published_at": "2021-03-03T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305503f787", "title": "Here’s who is powering the bulletproof hosting market", "url": "https://www.intel471.com/blog/top-bulletproof-hosting-providers-yalishanda-ccweb-brazzzers-2021", "published_at": "2021-03-03T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30559b04f4", "title": "XDR is the Rorschach Test of Cyber Security", "url": "https://www.intel471.com/blog/xdr-is-the-rorschach-test-of-cyber-security", "published_at": "2021-02-23T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3056722176", "title": "Bulletproof hosting: How cybercrime stays resilient", "url": "https://www.intel471.com/blog/bulletproof-hosting-yalishanda-ransomware-banking-trojans-information-stealers", "published_at": "2021-02-23T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305718f8f9", "title": "Social Engineering: It’s Not as Difficult as You Think!", "url": "https://www.intel471.com/blog/social-engineering-its-not-as-difficult-as-you-think", "published_at": "2021-02-19T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305774d62a", "title": "Egregor operation takes huge hit after police raids", "url": "https://www.intel471.com/blog/egregor-arrests-ukraine-sbu-maze-ransomware", "published_at": "2021-02-17T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305823fd72", "title": "Threat Hunting Can Be Fully Automated! - A Productive Rant", "url": "https://www.intel471.com/blog/threat_hunting_can_be_fully_automated", "published_at": "2021-02-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3058a5b877", "title": "Hiding in plain sight: Bulletproof Hosting’s dueling forms", "url": "https://www.intel471.com/blog/bulletproof-hosting-fast-flux-dns-double-flux-vps", "published_at": "2021-02-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3058b951fc", "title": "Cybercriminals are interested in your SCADA systems", "url": "https://www.intel471.com/blog/scada-oldsmar-florida-water-treatment-plant-hack", "published_at": "2021-02-12T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3058bfcef4", "title": "The Best Threat Intelligence Tools for the Command Line", "url": "https://www.intel471.com/blog/the-best-threat-intelligence-tools-for-the-command-line", "published_at": "2021-02-09T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30596d1ed4", "title": "Cyber Threat Hunting: Become an Expert with These 4 Videos!", "url": "https://www.intel471.com/blog/cyber-threat-hunting-become-an-expert-with-these-4-videos", "published_at": "2021-02-02T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3059bf5479", "title": "Emotet takedown is not like the Trickbot takedown", "url": "https://www.intel471.com/blog/emotet-takedown-2021", "published_at": "2021-01-27T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305a34b997", "title": "Threat Detection and Why You Should Spend More Time Thinking About It", "url": "https://www.intel471.com/blog/threat-detection-and-why-you-should-spend-more-time-thinking-about-it", "published_at": "2021-01-26T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305af42ea2", "title": "Threat Hunt Deep Dives: Apache Struts RCE (CVE-2020-17530)", "url": "https://www.intel471.com/blog/threat-hunt-deep-dives-apache-struts-rce-cve-2020-17530", "published_at": "2021-01-21T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305b84600c", "title": "7 Threat Hunting Tools Everyone in the Industry Should Be Using", "url": "https://www.intel471.com/blog/7-threat-hunting-tools-everyone-in-the-industry-should-be-using", "published_at": "2021-01-20T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305be83522", "title": "Nation-states are taking their supply-chain attack strategy from the cybercriminal underground", "url": "https://www.intel471.com/blog/solarwinds-supply-chain-attack-iran-russia-north-korea", "published_at": "2021-01-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305c9846f8", "title": "Last Dash for Joker’s Stash: Carding forum may close in 30 days", "url": "https://www.intel471.com/blog/jokers-stash-closed-february-2021", "published_at": "2021-01-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305caeb059", "title": "Cyborg Security Releases Free SUNBURST Community Defense Measures", "url": "https://www.intel471.com/blog/sunburst-community-defense-measures", "published_at": "2021-01-12T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305d6f8143", "title": "Hunting for Persistence: Registry Run Keys / Startup Folder", "url": "https://www.intel471.com/blog/hunting-for-persistence-registry-run-keys-startup-folder", "published_at": "2021-01-07T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305e175c88", "title": "Threat Hunting Tactics & Techniques", "url": "https://www.intel471.com/blog/threat-hunting-tactics-techniques", "published_at": "2021-01-05T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305ed59b48", "title": "TA505’s modified loader means new attack campaign could be coming", "url": "https://www.intel471.com/blog/ta505-get2-loader-malware-december-2020", "published_at": "2020-12-18T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305fc980ad", "title": "More annoying than crippling: Joker’s Stash takedown is temporary", "url": "https://www.intel471.com/blog/jokers-stash-fbi-interpol-dns-takedown-temporary", "published_at": "2020-12-17T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba305ff90f95", "title": "SUNBURST: SolarWinds' Supply-Chain Attack", "url": "https://www.intel471.com/blog/sunburst-solarwinds-supply-chain-attack", "published_at": "2020-12-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3060c7dbd9", "title": "Threat Hunt Deep Dives: SolarWinds' Supply-Chain Compromise (Solorigate / SUNBURST Backdoor)", "url": "https://www.intel471.com/blog/threat-hunt-deep-dives-solarwinds-supply-chain-compromise-solorigate-sunburst-backdoor", "published_at": "2020-12-15T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3060ce0b64", "title": "Threat Hunt Deep Dives: Application Shimming", "url": "https://www.intel471.com/blog/threat-hunt-deep-dives-application-shimming", "published_at": "2020-12-10T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306141053c", "title": "No pandas, just people: The current state of China’s cybercrime underground", "url": "https://www.intel471.com/blog/china-cybercrime-undergrond-deepmix-tea-horse-road-great-firewall", "published_at": "2020-12-10T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30619e83f0", "title": "Hunting a Phish", "url": "https://www.intel471.com/blog/hunting-a-phish", "published_at": "2020-12-09T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3061cbe78f", "title": "Top 3 Easiest Threat Hunts", "url": "https://www.intel471.com/blog/top-3-easiest-threat-hunt", "published_at": "2020-12-01T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30625e9375", "title": "Steal, then strike: Access merchants are first clues to future ransomware attacks", "url": "https://www.intel471.com/blog/ransomware-attack-access-merchants-infostealer-escrow-service", "published_at": "2020-12-01T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3062a8746c", "title": "Black Hat Webcast Series | Practical Threat Hunting", "url": "https://www.intel471.com/blog/black-hat-webcast-series-practical-threat-hunting-2", "published_at": "2020-11-30T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306306225e", "title": "Here’s what happens after a business gets hit with ransomware", "url": "https://www.intel471.com/blog/how-to-recover-from-a-ransomware-attack", "published_at": "2020-11-23T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30635de954", "title": "Threat Hunt Deep Dives: The Return of the WIZard", "url": "https://www.intel471.com/blog/threat-hunt-deep-dives-episode-1", "published_at": "2020-11-20T18:00:00+00:00" } ] posts Claim your blog

Back to Intel 471

Blog · corpus.blog/blogs/intel471.com/posts

Intel 471

intel471.com

2021

How cryptomixers allow cybercriminals to clean their ransoms original ↗

15 Nov 2021

Macaw Ransomware original ↗

2 Nov 2021

Cybercrime underground flush with shipping companies’ credentials original ↗

1 Nov 2021

Top 5 OSINT Sources for Attack Surface Management original ↗

25 Oct 2021

Top 5 OSINT Sources for People Investigations original ↗

24 Oct 2021

Cybercriminals cash in on black market vaccine schemes original ↗

19 Oct 2021

Top 5 OSINT Sources for Threat Intelligence original ↗

7 Oct 2021

The public sector is a juicy target for cybercriminals original ↗

30 Sept 2021

Cybercriminals going after one-time passwords with Telegram-powered bots original ↗

29 Sept 2021

Manufacturers should focus on protecting their supply chains original ↗

22 Sept 2021

Top 5 OSINT Sources for Penetration Testing and Bug Bounties original ↗

11 Sept 2021

njRAT Remote Access Trojan original ↗

10 Sept 2021

How Groove Gang is shaking up the Ransomware-as-a-Service Market to Empower Affiliates original ↗

9 Sept 2021

The Threat Hunting Conundrum: Challenges Security Teams Face original ↗

9 Sept 2021

Expectation vs Reality: Debunking 5 (More) Myths About Threat Hunting original ↗

2 Sept 2021

Outsourcing manipulation: How BEC scammers use the cybercrime underground original ↗

1 Sept 2021

Attack Surface Management: You’re probably doing it wrong original ↗

26 Aug 2021

From a Global Man Hunt to a Cyber Threat Hunt original ↗

26 Aug 2021

Here’s how to guard your enterprise against ShinyHunters original ↗

23 Aug 2021

Logs & You: Explaining Threat Hunting to Non-Threat Hunters original ↗

19 Aug 2021

Here’s how information stealers pose a threat beyond ransomware original ↗

18 Aug 2021

Lock 'N' Load: A New LockBit Campaign original ↗

12 Aug 2021

Three ways ransomware-as-a-service has become easier than ever to launch original ↗

28 Jul 2021

Cyber Threat Hunting: 3 MORE Videos to Help You Become an Expert original ↗

22 Jul 2021

Meteor Wiper original ↗

16 Jul 2021

Threat Content Platforms: Why We Need Them More Than Ever Before original ↗

15 Jul 2021

How cybercriminals create turbulence for the transportation industry original ↗

14 Jul 2021

Proactive Threat Hunting Shouldn’t Just be a Buzzword original ↗

8 Jul 2021

Sibot Malware original ↗

24 Jun 2021

Cybercriminals shop around for schemes targeting retail original ↗

23 Jun 2021

TEARDROP Dropper Malware original ↗

23 Jun 2021

Attempted VBScript Stored in Non-Run CurrentVersion Registry Key Value original ↗

22 Jun 2021

The blurry boundaries between nation-state actors and the cybercrime underground original ↗

8 Jun 2021

How SOAR plus threat intelligence empowers security operations teams original ↗

8 Jun 2021

How much data do you leak online unintentionally?original ↗

6 Jun 2021

BoomBox Downloader original ↗

4 Jun 2021

Alleged REvil member says gang has no fear over U.S. government’s major ransomware focus original ↗

4 Jun 2021

Threat Hunt Deep Dives: User Account Control Bypass Via Registry Modification original ↗

3 Jun 2021

Call for crimes? Russian-language forum runs contest for cryptocurrency hacks original ↗

2 Jun 2021

The Easiest Way to (Hack|Protect) an Organization in 2021: Knowing the Attack Surface original ↗

1 Jun 2021

Suspicious rundll32 Execution original ↗

31 May 2021

EnvyScout Dropper original ↗

29 May 2021

We Need a New National Cyber Security Strategy original ↗

25 May 2021

Look how many cybercriminals love Cobalt Strike original ↗

19 May 2021

Cybercriminals have so many schemes aimed at your credentials original ↗

17 May 2021

The moral underground? Ransomware operators retreat after Colonial Pipeline hack original ↗

14 May 2021

Here’s what we know about DarkSide ransomware original ↗

10 May 2021

Ransomware: Hunting for Inhibiting System Backup or Recovery original ↗

6 May 2021

4 Ways Threat Hunting Helps Non-Traditional ROI original ↗

29 Apr 2021

The cybercriminal underground hasn’t forgotten about financial services original ↗

26 Apr 2021

Healthcare & Ransomware: A Different Type of Pandemic original ↗

20 Apr 2021

How China’s cybercrime underground is making money off big data original ↗

19 Apr 2021

Sodinokibi original ↗

16 Apr 2021

Threat Content: Building a Better Mousetrap original ↗

15 Apr 2021

Blackmatter original ↗

14 Apr 2021

Meterpreter Payload original ↗

9 Apr 2021

How to Threat Hunt: A Beginner's Guide original ↗

8 Apr 2021

Cobalt Strike original ↗

7 Apr 2021

EtterSilent: the underground’s new favorite maldoc builder original ↗

6 Apr 2021

Ryuk Ransomware original ↗

2 Apr 2021

Threat Detection: 4 Little Changes That'll Make a Big Difference original ↗

1 Apr 2021

Pysa Ransomware original ↗

24 Mar 2021

Living off the Land (LotL) - RDP Hijacking original ↗

23 Mar 2021

Cybercriminals still leveraging COVID-19 pandemic for scams original ↗

23 Mar 2021

A Threat Hunting Loop for Structured Hunting original ↗

16 Mar 2021

You Don't Know the HAFNIUM of it...original ↗

11 Mar 2021

Living off the Land (LotL) - Downloading Files on Microsoft Windows original ↗

9 Mar 2021

Friendly fire: Four well-known cybercriminal forums dealing with breaches original ↗

4 Mar 2021

Threat Hunting Maturity Model: A New Approach for Structured Hunting original ↗

3 Mar 2021

Here’s who is powering the bulletproof hosting market original ↗

3 Mar 2021

XDR is the Rorschach Test of Cyber Security original ↗

23 Feb 2021

Bulletproof hosting: How cybercrime stays resilient original ↗

23 Feb 2021

Social Engineering: It’s Not as Difficult as You Think!original ↗

19 Feb 2021

Egregor operation takes huge hit after police raids original ↗

17 Feb 2021

Threat Hunting Can Be Fully Automated! - A Productive Rant original ↗

16 Feb 2021

Hiding in plain sight: Bulletproof Hosting’s dueling forms original ↗

15 Feb 2021

Cybercriminals are interested in your SCADA systems original ↗

12 Feb 2021

The Best Threat Intelligence Tools for the Command Line original ↗

9 Feb 2021

Cyber Threat Hunting: Become an Expert with These 4 Videos!original ↗

2 Feb 2021

Emotet takedown is not like the Trickbot takedown original ↗

27 Jan 2021

Threat Detection and Why You Should Spend More Time Thinking About It original ↗

26 Jan 2021

Threat Hunt Deep Dives: Apache Struts RCE (CVE-2020-17530)original ↗

21 Jan 2021

7 Threat Hunting Tools Everyone in the Industry Should Be Using original ↗

20 Jan 2021

Nation-states are taking their supply-chain attack strategy from the cybercriminal underground original ↗

15 Jan 2021

Last Dash for Joker’s Stash: Carding forum may close in 30 days original ↗

15 Jan 2021

Cyborg Security Releases Free SUNBURST Community Defense Measures original ↗

12 Jan 2021

Hunting for Persistence: Registry Run Keys / Startup Folder original ↗

7 Jan 2021

Threat Hunting Tactics & Techniques original ↗

5 Jan 2021

2020

TA505’s modified loader means new attack campaign could be coming original ↗

18 Dec 2020

More annoying than crippling: Joker’s Stash takedown is temporary original ↗

17 Dec 2020

SUNBURST: SolarWinds' Supply-Chain Attack original ↗

16 Dec 2020

Threat Hunt Deep Dives: SolarWinds' Supply-Chain Compromise (Solorigate / SUNBURST Backdoor)original ↗

15 Dec 2020

Threat Hunt Deep Dives: Application Shimming original ↗

10 Dec 2020

No pandas, just people: The current state of China’s cybercrime underground original ↗

10 Dec 2020

Hunting a Phish original ↗

9 Dec 2020

Top 3 Easiest Threat Hunts original ↗

1 Dec 2020

Steal, then strike: Access merchants are first clues to future ransomware attacks original ↗

1 Dec 2020

Black Hat Webcast Series | Practical Threat Hunting original ↗

30 Nov 2020

Here’s what happens after a business gets hit with ransomware original ↗

23 Nov 2020

Threat Hunt Deep Dives: The Return of the WIZard original ↗

20 Nov 2020