Name: Malware For Sale: Analyzing Malware-as-a-Service On Dark Web Markets
Start: 2023-06-08T10:22:00Z
End: 2023-06-08T10:23:03.000Z
Location: BrightTALK
Rating: 5

Cyberint's impactful intelligence solution combines cyber threat intelligence, external attack surface management, brand protection, and digital supply chain intelligence into a single, powerful platform. By leveraging autonomous discovery of all of an organization’s external-facing assets, coupled with open, deep & dark web intelligence, the solution enables cybersecurity teams to accelerate the detection and disruption of their most pressing cyber risks. Global customers, including Fortune 500 leaders across all major market verticals, rely on Cyberint to prevent, detect, investigate, and remediate phishing, malware, fraud, brand abuse, data leaks, external vulnerabilities, and more, ensuring continuous external protection from cyber threats.

Sophisticated threat groups are targeting organizations in the Asia-Pacific region with increasing frequency. These bad actors utilize a wide range of initial vectors and deploy many kinds of attacks, from phishing attacks and malware infections to vulnerability exploitation and supply chain attacks.

Join two of Cyberint's security experts in the APAC region for a deep-dive webinar on the latest risks, threats, and TTPs in APAC. Jono Angelo Biyo, Solutions Engineer, and Noel Anthony Llimos, Cyber Threat Intelligence Analyst (APAC Regional & Finance Industry Expert), will discuss the following topics:

-  phishing and smishing threats
-  the persistent threat of stolen credentials
-  increased Hacktivism risks 
-  ransomware activity in APAC
-  supply chain attacks & 3rd party risk

Join us on Tuesday, June 11th at 13:00 UTC+8 (Singapore) to uncover the APAC cyber threat landscape and receive insights on how to keep your organization secure.

Assessing The Cyber Threat Landscape In APAC, H1 2024

Defensa contra los 3 vectores de ataque mas comunes: Cómo mitigar los riesgos de filtración de credenciales, phishing y explotación de vulnerabilidades

En los últimos años, la gran mayoría de las filtraciones de datos corporativos comenzaron con los mismos tres vectores de ataque iniciales: phishing, credenciales robadas y explotación de CVE. Si bien es de conocimiento común que estas tres técnicas son las más utilizadas por los actores de amenazas, los profesionales de la seguridad de la información aún enfrentan desafíos a la hora de defender sus organizaciones contra estos ataques.

En este seminario web, Ariel Friedstadt, analista de inteligencia cibernética, y Erixsa Lewis, gerente de éxito del cliente, profundizarán en cómo los actores de amenazas explotan estos tres principales vectores de ataque y cómo las empresas pueden defenderse mejor contra este tipo de ataques. En el camino, veremos cómo los atacantes colaboran en la web profunda y oscura para llevar a cabo sus delitos cibernéticos. También revisaremos varias estrategias efectivas de mitigación de riesgos que se pueden implementar para una postura de seguridad más sólida.

Únase a Cyberint el jueves 30 de mayo a las 11:00 a. m. EST para obtener más información sobre los 3 principales vectores de ataque iniciales y lo que puede hacer para mantenerse dos pasos por delante de los atacantes.

Defensa contra los 3 vectores de ataque mas comunes

Para mantenerse al día con los mercados de ciberseguridad en rápida evolución y satisfacer las demandas de los clientes, los MSSP deben ampliar continuamente su oferta. Esto presenta varios desafíos para los MSSP: reconocer las tendencias y demandas del mercado, seleccionar los proveedores de tecnología adecuados con los que asociarse y dominar rápidamente estas nuevas herramientas para soportar la prestación de servicios. 

Con Cyberint, una plataforma externa líder de administración de riesgos cibernéticos, los MSSP tienen la oportunidad de ampliar su oferta de servicios, reducir el riesgo cibernético para sus cuentas y aumentar los ingresos.

Únete a Iker Alonso del equipo de Cyberint el miércoles 8 de mayo a las 11am EST para conocer más sobre cómo una asociación con Cyberint impulsa el crecimiento de tu negocio MSSP.

Amplíe su negocio MSSP con la impactante inteligencia de Cyberint

Threat actors often launch phishing attacks because they are reliably effective. Research shows that phishing is consistently a top initial attack vector in corporate data breaches, with as many as one-third of breaches beginning with a phishing attack.

In this webinar, Cyberint Threat Intelligence Team Lead Guy Almog will discuss the phishing threat landscape and help you improve your phishing detection skills.

In a gameshow-style webinar, Guy will show 3 websites: two will be legitimate sites but one will be malicious. Viewers will have the chance to guess which one is the phishing site. After the phish is revealed, we will review the malicious indicators found in these real-world examples. During the course of the webinar, we will play multiple rounds and examine several real phishing sites in the wild.

Join us for this webinar to see if you can catch the phish.

Catching Phish: Can You Spot The Malicious Sites?

Year after year, the use of compromised credentials is a top initial attack vector. Despite this risk being well understood among security teams, threat actors continue to leverage exposed credentials to gain unauthorized access to corporate networks, systems, and data.

In this webinar, Cyberint Senior Product Marketing Manager Daniel Pigeon will drill down on the persistent risk of exposed credentials and discuss the many ways in which threat actors steal and use credentials in their attacks. Topics will include:

      -  primary TTPs for credential theft 
      -  how exposed credentials are put to use
      -  attacker techniques for bypassing MFA
      -  risk mitigation strategies

Join us on Wednesday, March 6th at 11:00am EST for insights on mitigating the risk of leaked credentials at your organization.

The Persistent Threat Of Exposed Credentials

After plateauing in 2022, the ransomware industry had another explosive year in 2023. The Cyberint research team observed an increase of more than 60% from 2022 to 2023.

In this webinar, Shmuel Gihon, the Security Research Team Lead at Cyberint, will dive into the following topics:

     -  A brief recap of ransomware stats from 2023
     -  An analysis of ransomware gangs, including the dominant groups as well as up-and-comers
     -  The latest tactics, techniques, and procedures used by ransomware operators
     -  Risk mitigation strategies to minimize the risk of a ransomware attack

Join us at 11:00am EST on Wednesday, February 7th for a deep dive on the ransomware industry and how to protect your organization against it.

Ransomware Recap 2023: An Analysis of the Ransomware Threat Landscape

Get ahead of the latest cyber threats that are set to emerge in 2024. 

In this webinar, Cyberint CEO Yochai Corem will dive into the following topics:

     -  Brief recap of cyber threat trends of 2023
     -  A look at emerging threats to prepare for in 2024
     -  How the needs of enterprise security teams are shifting 
     - Cyberint’s vision and product development plans

Join us on Tuesday, January 16th at 11:15am EST to stay ahead of the latest threats and ensure the readiness of your organization’s security program.

A Look Ahead: Surveying The 2024 Cyber Threat Landscape

Throughout 2023, threat actors launched many large campaigns to exploit vulnerabilities at scale: ESXi, GoAnywhere MFT, MOVEit, Microsoft Exchange, Fortinet VPNs, Barracuda Email Security Gateways, and more.

With vulnerability exploitation re-emerging as a preferred initial attack vector, it is critical for organizations to which vulnerabilities pose the most risk so they can be prioritized and patched as quickly as possible. Threat intelligence-- data on which vulnerabilities are exploited in the wild, which have public exploit code, which are being discussed in threat actor forums, and much more-- is essential to risk assessment and prioritization processes.

In this webinar, Gino Rombley, a Senior Security Architect at Cyberint, will discuss the following:

     - An overview of CVE statistics and vulnerability exploitation campaigns of 2023
     - A brief intro to CVSS v4.0 and highlights of what's new in v4
     - Using attack surface management to understand the CVEs in your external assets
     - How Threat Intelligence reveals the true risk profile of a CVE 
     - Accelerating prioritization and remediation processes to stay secure

Join us at 10:00am EST on Thursday, December 14th to understand how you can optimize remediation efforts and keep your organization secure.

Vulnerability Intelligence: Using Threat Intel To Assess The Risk Of A CVE

Join Cyberint on a guided tour into threat actor forums and marketplaces on the deep and dark web, where cyber criminals traffic everything from malware and phishing kits to stolen data and exposed credentials.

A Guided Tour Into The Deep & Dark Web

Cyberint helps protect hundreds of customers around the world. As part of our continuous monitoring operations, we routinely find threat intelligence that is relevant to our customers. The threat could be impersonation of a customer's brand on social media or a phishing site; a malware infection of an employee's or customer's machine; a leak of sensitive data, such as source code, credit card details, or PII; or exposed corporate credentials. 

In this webinar, 4 threat intelligence experts from the Cyberint team will break down the details of a recent investigation. It will be an analyst roundtable event, where both the presenters and viewers will be encouraged to provide different perspectives, ask questions, and share knowledge they’ve gained from their own experiences.

Ela Kacowicz, Itai Dahari, Darja Feldman, and Yehonatan Wiesel will each discuss a recent threat they discovered, how they responded to it, and how the risk was ultimately mitigated. While these case studies will be anonymized, they represent real threats detected 'in the wild’ that could have potentially led to a serious security incident. 

Join us on Tue, Nov 14th at 11am EST as we give you the play-by-play on recent threat investigation and response scenarios.

Cyber Threat Investigations: Tales From The Front Lines

In the world of Information Security, it’s often said that threat intelligence must be “actionable.” This is true, but it’s just one piece to the puzzle.

The threat landscape of 2023 calls for intelligence that makes an impact. Impactful intelligence is actionable, but it must have additional properties to make it valuable to the defending organization. In particular, the intelligence must true, relevant, actionable, and the cost of remediation must be less than the cost of the risk presented by that particular threat.

Join Cyberint CEO Yochai Corem in this webinar to learn more about taking your organization on The Journey To Impactful Intelligence.

The Journey To Impactful Intelligence

Sophisticated threat groups are targeting organizations in the Asia-Pacific region with increasing frequency. These bad actors utilize a wide range of initial vectors and deploy many kinds of attacks, from phishing and malware to vulnerability exploitation and supply chain attacks.

Join two of Cyberint's security experts in the APAC region for a deep-dive webinar on the latest risks, threats, and TTPs in APAC. Adrianne Chester Camat, Threat Intelligence Team Lead, and Akanksha Harjai, Security Solutions Engineer, will discuss the following topics:

-  phishing and smishing threats
-  the rise of InfoStealers
-  stolen credentials and MFA bypass
-  ransomware on the rise in APAC
-  supply chain attacks

Join us on Tuesday, October 24 at 15:00 UTC+8 (Singapore) to uncover the APAC cyber threat landscape and receive insights on how to keep your organization secure.

Uncovering the APAC Cyber Threat Landscape

Ströer, a leading German media company, significantly improved security posture with deployment of Cyberint, the leading provider of impactful intelligence. 

Join us for this webinar as B̳e̳n̳jamin Bachmann, Group CISO at Ströer, discusses the positive impact that working with Cyberint has had on Ströer’s cybersecurity program. Topics will include:

• The current threat landscape & what’s top of mind for CISOs right now
• Complexities in managing the security of many brands and companies 
• Challenges and cyber threats faced prior to engaging with Cyberint
• Results and outcomes provided by the Cyberint platform

Register now and join us for the recorded webinar on Tuesday, October 10th at 11am EST.

Customer Success Story: Ströer & Cyberint

Cyberint, führender Anbieter für wirkungsvolle Intelligenz, lädt Sie herzlich zu unserem Webinar ein. Erfahren Sie, wie die Zusammenarbeit mit Cyberint Unternehmen weltweit dabei unterstützt, externe Cyberbedrohungen schneller zu erkennen und zu bekämpfen. Dieses Mal haben wir einen ganz besonderen Gast: Benjamin Bachmann, Group Chief Information Security Officer bei Ströer, einem führenden deutschen Medienunternehmen mit Sitz in Köln und über 10.000 Mitarbeitern an über 100 Standorten.

Seien Sie dabei, wenn Benjamin Bachmann über die positiven Auswirkungen der Zusammenarbeit mit Cyberint auf die Sicherheitslage bei Ströer spricht. 

Diskutierte Themen werden sein:
• Aktuelle Bedrohungslage und die aktuellen Sorgen von CISOs
• Herausforderungen bei der Sicherheitsverwaltung vieler Marken und Unternehmen
• Schwierigkeiten und Cyberbedrohungen, die vor der Zusammenarbeit mit Cyberint auftraten
• Ergebnisse und Erkenntnisse, die durch die Nutzung der Cyberint-Plattform und des Expertenteams erzielt wurden

Registrieren Sie sich jetzt und nehmen Sie am Webinar teil, am Dienstag, den 26. September, um 11 Uhr CET (MEZ).

Ströers gesteigerte Sicherheit und Risikoreduktion mit Cyberint

The United States is at the epicenter of cyber crime globally. It is by far the most highly-targeted nation, and American businesses face a higher volume of attacks as well as more costly consequences when an attack is successful.

In this webinar, Cyberint Threat Research Team Lead Shmuel Gihon will discuss the current US threat landscape, recent trends, and the most urgent risks to prepare for. Using research and data collected by the Cyberint research team, Shmuel will provide insights into the following topics:

• Strategic intelligence: regional and industry-level threat analysis
• Shifting TTPs in fraud, phishing, malware, and ransomware
• The emerging threat of generative AI and ChatGPT
• Risk mitigation strategies for security leaders

Join us on Tuesday, September 12th at 12pm EST for insights on how to optimize your defenses against the most relevant and urgent cyber risks.

Assessing the Cyber Threat Landscape in the USA

Join experts from Cyberint and Cyware on August 29th at 1:00pm EST as we talk about how to connect the dots on threats and other intel to be on the offense. Topics we’ll dive into include:

• Don't wait for an attack to start defending – take a proactive approach
• Risks from the Internet of Things  and how to get ahead of them
• The latest state-sponsored threats  and how to defend your organization
• Using automation to reduce the noise and highlight real threats
• Breaking down communication silos to facilitate rapid response

Exposing Invisible Threats

In recent months, threat actors have adopted a new technique for driving traffic to phishing sites: malicious advertisements on search engines and social media platforms. Known as "malvertising," this new technique poses major risks for consumers and businesses alike.

Join Cyberint for a webinar on malvertising as Threat Intelligence Team Lead Or Shichrur covers the following topics:

   - How threat actors exploit trust in major brands
   - Common TTPs in malvertising attacks
   - The risks that malicious ad introduce for businesses

Cyberint Threat Intelligence Analyst Yehonatan Wiesel will discuss a recent case study of a malicious ad campaign impersonating a Cyberint customer's brand on major search engine advertising platforms.

Learn how the to mitigate the risk of malvertising as Yehonatan explains how he investigated the threat, uncovered the threat actor's infrastructure, and eliminated the risk.

The Rise Of Malvertising: The Use Of Malicious Ads In Phishing Campaigns

Threat actors love supply chain attacks because they enable cyber criminals to claim many victims with the time and effort that it takes to compromise just one organization.

At the same time, as businesses work with an increasingly large number of digital suppliers, partners, and vendors, the risk introduced through third-parties is increasingly hard to measure and mitigate. A security incident at a vendor or digital supplier can easily expose sensitive data for a number of third-party organizations.

In this webinar, Cyberint VP of Product & Technology Ophir Bleiberg will discuss these challenges and introduce a new approach for managing cyber risks in your digital supply chain.

Securing Your Digital Supply Chain: A new approach to managing 3rd party risks

On deep and dark web marketplaces, malware is sold through a subscription model for as little as $50 per month. This has made it much easier for anyone—even those who don’t have strong technical skills or experience writing malicious software—to enter the world of cybercrime. Because of this developing Malware-as-a-Service model, the volume and frequency of attacks continue to climb.

In this webinar, Cyberint Solutions Sales Engineer Akanksha Harjai will provide insights on the latest strains of malware, the availability of malware on marketplaces, and the impact this has on businesses. The webinar will discuss:

     - An overview of the latest malware trends
     - Deep & dark web marketplaces
     - The evolution of the Malware-as-a-Service model
     - Malware analysis: exploitation and evasion techniques
     - Mitigation strategies

Check out this webinar to learn more about malware-as-a-service and how to mitigate these risks.

Malware For Sale: Analyzing Malware-as-a-Service On Dark Web Markets

Cyber Security

Malware

Information Security

Cyber Crime

Cyber Attacks

Threat Intelligence

Threat Detection

Cyber Intelligence

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Malware For Sale: Analyzing Malware-as-a-Service On Dark Web Markets

Presented by

About this talk

More from this channel