Name: How Attackers Harvest Credentials & Gain Initial Access
Start: 2022-02-17T06:00:00Z
End: 2022-02-17T06:00:52.000Z
Location: BrightTALK
Rating: 0

Recorded Future delivers meaningful results for our clients. Whether it’s improving efficiency for research and triage, slashing time to threat detection, or improving your organization’s bottom line, we are dedicated to saving our clients time and money — in addition to measurably reducing risk. We believe that intelligence is the key to unlocking the potential of security programs – and protecting our organizations and communities. We believe that security solutions should do just that: be solutions – helping to solve big problems and reduce risk. We know that the right intelligence, in the hands of the right people, at the right time, stops attackers in their tracks.

In this interactive 30-minute live demo, Lewis Brand, Sales Engineer at Recorded Future talked about SecOps Intelligence and its integrations.

Automate your SOC with SecOps Intelligence Integrations

In this live demo, Lance Moraitis-Jones, Sales Engineer at Recorded Future, gave attendees insight on how Attack Surface Intelligence strengthens your perimeter by continuously scanning of the internet for attack surface blindspots, discovering and mapping external-facing assets and systems, and lastly, by providing real-time risk scores on vulnerabilities and exposures to aid prioritisation.

Shine a Light on Security Blind Spots with Attack Surface Intelligence

In this webinar, our experts unveil the devious strategies criminals use to infiltrate e-commerce sites and steal payment card data without getting caught. Tune in to uncover:

- Schemes criminals use to steal payment card data
- What an active infection looks like
- Easy targets for criminals
- How to defend against Magecart/e-skimmer attacks

The Dark Arts Fraudsters Use to Steal Payment Data

In the current world the threat landscape is changing rapidly with dozens of attack vectors and TTPs. This becomes the biggest challenge for Security Teams to keep up with it and adapt their cybersecurity program. This is a great idea but it requires time and resources, which many of us simply do not possess. During this webinar, , the speaker covered all mandatory steps to accelerate security operations by implementing Cyber Threat Intelligence. He gave attendees live examples of how SOC procedures look with CTI implementation and he showed how the Recorded Future platform can convert the unexpected journey into a successful one.

CTI: The Unexpected Journey To An Adaptive Security Program

n this live webinar, Ahmed Saleh taught attendees how you can optimise your SecOps workflows with real-time intelligence. Attendees also gained insight on how to automatically detect risky IOCs in your environment, triage alerts faster with elite, real-time intelligence, respond quickly with transparency and context around internal telemetry data, and lastly, proactively block threats before they impact the business.

Accelerate Threat Hunting With Intelligence in IBM Security QRadar

Dark web criminals steal revenue from financial organizations through credit card fraud. While this is well known, criminals often expose their operations through operational weaknesses and the nature of criminal marketplaces.

This webinar was run by the Recorded Future Card Fraud Division (Stanislav Alforov & Sam Langrock). They took deep dive into the murky underground of credit card fraud, showed attendees it works, and how they can save millions of dollars through intelligence.

This webinar covered:
• How fraudsters use e-skimmer infections to gather and sell stolen credit cards
• The nature of criminal marketplaces, and how they expose their operations
• Why card fraud intelligence is the answer for shortening fraud mitigation cycles, limiting client exposure and cutting reputational damage

Credit Card Fraud: What the Dark Web Fraudsters Don’t Want You to Know

Part 3 of 3-part series Off The Record:

Recorded Future observes Chinese state-sponsored cyber-espionage and surveillance campaigns, likely from Red Alpha (Deepcliff, Red Dev 3), engaging in mass credential theft activity, targeting humanitarian, think tank, and government organizations globally.  Over the past 3 years, we have seen them register and weaponize hundreds of domains spoofing these organizations and more.

Watch this exclusive interview with Jon Condra, Director of the Strategic and Persistent Threats team at Recorded Future, to get a behind the scenes look into the research.

Off The Record: RedAlpha Conducts Multi-Year Credential Theft Campaign - Part 3

Part 2 of 3-part Series of Off The Record:   
As China continues to tighten its control of the internet and crackdown on cybercrime, economic hardships from a slowing economy and lockdowns have driven more people to engage in scams and cybercrime to pay their bills. Bordering regions have become fertile ground for Chinese cybercrime, with sophisticated crime syndicates and Chinese victims.

Watch this exclusive interview with Di Wu, Senior Threat Intelligence Analyst with Recorded Future  to get a deeper dive into this research.

Off The Record: Chinese Cybercrime in Neighboring Countries - Part 2

Part 1 of 3-part series of the Off The Record:

The Chinese Communist Party (CCP) strives to maximize its influence over international audiences, especially global youth. Though their propaganda and thought work apparatus is an “elephant,” weighed down by decades of tradition, party politics, and a complex bureaucracy, the vice minister introduces the challenge to “learn to street dance.” Find out more about these strategy changes..

Watch this on-demand exclusive interview with Devin Thorne, Senior Threat Intelligence Analyst with Recorded Future to find out more about this strategy and its adaptations.

Off The Record: The Chinese Communist Party’s Propaganda - Part 1

In this 30-minute live demo, Toby Wilmington Senior Sales Engineer, Team Lead UKI & SEUR at Recorded Future, gave a presentation on our threat intelligence module. He gave attendees insight on how to track new and emerging threats targeting your organisation, where to find Insikt research and create alerts for new analysis, how to find and use Hunting Packages within your current security tools, and lastly, where Insikt Group can help, highlighting previous success stories with existing clients.

Inside Your House: Threat Hunting with Threat Intelligence

In this conversation, you’ll hear from Verizon DBIR lead engineer and co-author, Philippe Langlois, and Threat Intelligence expert Dylan Davis as they discuss:

• The prevalence of leaked credentials and the growing sophistication of attacks
• How cybercriminals steal and then monetize corporate data on the dark web
• The connect between credential leaks and ransomware attacks
• The impact of identity compromises on organizations large and small
• Practical advice for reducing risk to your organization

Shining a Light on Identity Compromises

The story hasn’t changed much in recent years — security operations teams are still understaffed, overworked, and losing trust in their tools. As the threat landscape grows more complex, the challenges facing security operations teams simultaneously grow in number and severity.

What kind of solution could help security operations teams face their challenges head-on?

Intelligence is the answer. Engineered to integrate with existing security tools, Recorded Future puts comprehensive intelligence at an analyst’s fingertips without adding additional complexity. In this exclusive Fireside Chat, experts from Recorded Future explain how intelligence can overcome problems each security operations center has, such as:

• Reducing security alert volume with meaningful insights
• Minimizing analyst attrition by improving workflows and decreasing research time
• Boosting analyst confidence with real-time context on threats

Fireside Chat: Improving the SOC with Intelligence

In this webinar, we will have a discussion on the evolving role of brand protection and attack surface management within organizations. This webinar covers:

- How attack surfaces are expanding for organizations both big and small
- How an intelligence-driven, outside-in view of your organization enables effective risk reduction
- How Recorded Future can help you uncover attack surface blind spots today

Digital Asset Management in an Expanding Attack Surface

In this live webinar, The presenter demonstrated how access to intelligence-led security empowers organisations to learn about these attacks proactively and take action, before they have the chance to cause real damage.

How To Disrupt Adversaries With Intelligence-Led Security

In this 30-minute live demonstration, the presenter gave attendees insight on how easy, one-click methods can uncover Company Risk Scores with common sense context through Risk Rules, how we show and tracking your organisation's Risk Score and help benchmark against your industry, and lastly, what threat actors see when they look at attacking your vendor and partner organisations.

Manage Supply Chain Risk with Third-Party Intelligence

The ongoing Ukraine War has involved components across all threat dimensions including physical conflict, disinformation, supply chain disruptions, and of course, cyber. Leading up to and throughout the war, several destructive cyber attacks launched against various entities, bringing the conflict to cyberspace and increasing the uncertainty of whether the Wiper malware variants could affect networks and companies outside of Ukraine by way of spillover.

To understand the malware variants used for these attacks, their effects, and mitigation strategies, join threat intelligence analysts from Recorded Future's research arm, Insikt Group for a discussion providing a high-level comparative overview of the 9 known wiper variants associated with the ongoing Ukraine War. This webinar will provide insight into the similarities and differences between the tools, the implications at a geopolitical level, and mitigation considerations in the event of spillover.

You will leave this webinar with:
• An understanding of what Wiper malware is and how it’s used
• A detailed comparison of the 9 Wiper malware variants used against Ukraine
• Mitigation considerations in the event of spillover attacks

Analysis and Mitigations of Wiper Malware Variants Used Against Ukraine

In part one of the Attack Life Cycle Webinar Series: How Attackers Harvest Credentials & Gain Initial Access, members of our Insikt Group (Lindsay Kaye, Justin Grosfelt, John Terbush) exposed the phases of the cyber attack lifecycle through the eyes of the attacker.

Attendees can expect to leave this webinar with:

- An understanding of the cyber attack lifecycle
- Real-world examples of how attackers get credentials and gain initial access
- A detailed look into Insikt Group exclusive research and reports on credential harvesting and detections for attacker’s favorite web shells

How Attackers Harvest Credentials & Gain Initial Access

Cyber Attacks

Threat Analysis

Threat Intelligence

identity intelligence

Identity Management

SecOps

Cyber Incident Response

Cyber Security

The social media marketing community on BrightTALK is composed of thousands of engaged social media professionals. Learn about social selling, B2B social media and social media marketing for businesses with live and on-demand webinars presented by industry leaders. Fine tune your social media marketing strategy by participating in live webinars and round table discussions.

Social Media Marketing

Demand generation is the process through which a business integrates marketing and sales to move potential buyers down the sales funnel from interest to payment. The BrightTALK demand generation community is made up of thousands of professionals sharing and learning best practices for engagement marketing, demand generation and lead scoring and nurturing through interactive webinars and videos. Register and join the conversation to attend live webinars and have your questions answered by demand generation professionals and thought leaders.

Demand Generation

The email marketing community on BrightTALK is made up of thousands of engaged email marketing professionals. Find relevant webinars and videos on email best practices to help you increase email conversions and drive email marketing ROI. Join expert speakers and email marketing peers sharing insights into building email lists, list segmentation, click-through rates and triggered campaigns.

Email Marketing

“People generally remember 10% of what they read, 20% of what they hear, 30% of what they see and 50% of what they see and hear.” This final segment, the merging of audio and visual, is what makes webinars and videos a crucial part of any marketing program. The BrightTALK webinar and video marketing community gives you access to webinars and videos on marketing, best practices for video marketing online and tips for creating a successful marketing webinar. Join thousands of marketing professionals exchanging information through on-demand and live webinars and videos.

Webinar and Video Marketing

The digital content marketing community on BrightTALK is made up of thousands of marketers using rich media and thought leadership content to drive engagement. Join to learn best practices for digital content creation and distribution and explore how content engagement can help you connect with your existing and prospective customers and drive revenue.

Content Marketing

The marketing community on BrightTALK is made up of thousands of engaged marketing professionals. Find relevant webinars and videos on marketing strategy, branding and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Marketing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How Attackers Harvest Credentials & Gain Initial Access

Presented by

About this talk

More from this channel