Tag: Advanced Threat Intelligence

Indonesian Cyber Jawa: An Emerging Group Vying for Legitimacy

Indonesian Cyber Jawa: An Emerging Group Vying for Legitimacy

The rapid and recent rise of cyber threat actor group Indonesian Cyber Jawa represents a pivot within the Indonesian cyber underground towards a more sophisticated attack toolkit from a relatively underrepresented underground criminal faction. The group is concentrating its defacement efforts on online retailers while simultaneously attempting to defraud targets in the same business vertical. 

Read more

Responding to Ransomware: A Q&A with David Shear of Vigilante

Responding to Ransomware: A Q&A with David Shear of Vigilante

It’s not enough to acknowledge the threat of ransomware—companies need to be positioned to communicate with threat actors (whether directly or indirectly), contain damage and minimize business interruption associated with this increasingly common form of cyberattack. I talked to David Shear, threat data governance and integration manager of Vigilante, about best practices in preparation and response to ransomware events. Read…

Read more

Smaug Ransomware-as-a-Service (RaaS)

Smaug Ransomware-as-a-Service (RaaS)

Vigilante wishes to highlight a threat actor or threat actor group on an exclusive Russian-language Dark Web forum that is currently advertising the Ransomware-as-a-Service (RaaS) known as “Smaug”. Although this type service is not entirely new, the Smaug RaaS platform is a particularly attractive option for lower-tier or unskilled cyber criminals to enter the Ransomware threat space, increasing the proliferation…

Read more