By: Stephen Gates, Chief Research Intelligence Analyst, NSFOCUS Over the past year, the cyber security industry has changed significantly in the light of an innovative tool called “Threat Intelligence” (TI). Organizations of all sizes are beginning to gain understanding of the value of TI; however, there is some confusion concerning what...
Blog
Thwarting 100,000+ Attacks on the G20 Summit, The NSFOCUS Experience
In September 2016, prominent world leaders representing the top 20 global economies gathered together in Hangzhou, China to kick off the 11th meeting of Group of Twenty (G20). This year marked the first time that the event was hosted in China and as a result, securing the Summit’s cyber assets...
“Shifu” Banking Trojan – Technical Analysis and Recommendations
Overview The banking Trojan "Shifu" was discovered by the IBM counter fraud platform in April, 2015. Built on the Shiz source code, this Trojan employs techniques adopted by multiple notorious Trojans such as Zeus, Gozi, and Dridex. This particular Trojan targeted 14 banks in Japan and re-emerged in Britain compromising...
NSFOCUS Launches Global Threat Intelligence Platform to Defend Against Sophisticated Cyber Attacks
As New Threat Actors and Vulnerabilities Emerge, NSFOCUS Provides the Most Complete Insight into Evolving Threats with Real-time, Actionable Intelligence Santa Clara, Calif., January 30, 2017 – NSFOCUS, a global provider of intelligent hybrid security solutions, today announced the launch of its Global Threat Intelligence platform. In the world of...
“Shifu” Banking Trojan – Technical Analysis and Recommendations
By: NSFOCUS Security Labs Overview The banking Trojan "Shifu" was discovered by the IBM counter fraud platform in April, 2015. Built on the Shiz source code, this Trojan employs techniques adopted by multiple notorious Trojans such as Zeus, Gozi, and Dridex. This particular Trojan targeted 14 banks in Japan and...
ElasticSearch Hit by Ransom Attack
By: Dr. Richard Zhao, SVP of Global Threat Research, NSFOCUS Overview During the week of January 21, 2017, over 34,000 vulnerable MongoDB databases fell victim to a ransom attack. Data residing on these databases was erased or encrypted and bitcoin payment was demanded in lieu for return of the data....
