Curated Intelligence

Search This Blog

PODCAST

Get link
Facebook
X
Pinterest
Email
Other Apps

We have a Podcast! Listen Now 👇

Get link
Facebook
X
Pinterest
Email
Other Apps

Threat Group Naming Schemes In Cyber Threat Intelligence

Curated Intelligence members explore threat group naming schemes and why they are important Written by @BushidoToken BLUF All organizations have their own unique access into sets of data and telemetry that other organizations do not. Many organizations create and define their own clusters differently which generates unique threat group candidates Background How the complex task of adversary attribution should be performed is an often debated topic amongst Cyber Threat Intelligence (CTI) analysts from various backgrounds at various organizations. This is because there is no standardized way of doing attribution, but the way it is being done by some organizations is actually is problematic and counterproductive. The Curated Intelligence community are a varied bunch of passionate CTI analysts with years of experience. So naturally, whenever the topic of attribution comes up everyone likes to share their $0.02. This is one of the best parts of our community and leads to great dis...

Curated Intel Threat Report: Multi Platforms Credit Card Information Harvesting Campaign

Introduction Tas ( @tas_kmanager ), in collaboration with Curated Intelligence, shared his research on the newly observed method of phishing utilizing chat functionality in multiple web/mobile applications. Furthermore, he is able to link this campaign to other similar campaigns based on the shared TTPs and IoCs. Background We have recently tracked a connection in global credit card information harvesting campaign targeting user in different postal and e-commerce services. This latest wave of phishing introduced a novel TTP of utilizing the postal, reservation and e-commerce services chat functionality. Earlier in this month, Tas personally received a suspicious message via chat from a hotel merchant in the travel reservation application Booking. Figure 1 - The Chat Message The message itself came from the official account of the hotel merchant, Tas has contacted them before via this method to inquiry information about the hotel room. The message was letting the guests know...

The CTI Research Guide

Introduction This CTI Research Guide aims to help practitioners learn more about how to effectively perform the collection, processing, analysis, and production stages of the CTI lifecycle. It promotes a repeatable method to keep track of all your sources, categorise them, extract meaningful information, form meaningful takeaways from your research, and document your findings. It is also useful from a perspective of knowing and tracking what you have looked at and already digested. By refocusing on what is important for your organisation, you will notice improvements on output and stakeholder satisfaction. Acknowledgements Thanks to Curated Intelligence members Steve Ragan, Freddy Murstad, Parthiban Rajendran, Øystein Brekke-Sanderud, Xena Olsen, Chris Campbell, and Grace Chi for reviewing this research guide and providing their insights. * * * You can access The CTI Research Guide on our GitHub below:

Powered by Blogger