- Cybercriminal ecosystem more mature than ever, reflecting legitimate cybersecurity sector
- Understanding how illicit services interact is key security priority
24 March 2020 – Barcelona, Spain – The cybercriminal industry is evolving, with a growing shadow economy that trades goods and services in much the same way as the legitimate cybersecurity sector. Today Blueliv, Europe’s leading threat intelligence provider, publishes its new report and the first in a series analyzing this evolution: DARK COMMERCE: Exploring the cybercrime industry and its business models: Part I.
DARK COMMERCE
This growing service economy has tools for hire, service providers, channels and end users. Cybercriminals of different levels of experience can acquire the necessary tools to launch a malicious campaign designed to attack business, governments and individuals. Particularly remarkable is the commitment of cybercriminals to adjust business practices to meet the needs of their customers, just like organizations in the cybersecurity industry. These topics are covered in detail in the report.
Understanding how attackers use these tools and services helps organizations prepare defenses and protect their assets by:
- Analyzing trends and patterns across different services: learning about how the cybercriminal ecosystem operates helps identify potential vulnerabilities and apply cyber-hygiene best practices and education programs
- Building complete threat actor profiles: understanding the interrelations between threat actors enables organizations to put in place effective defensive measures, appropriate to their business size
- Assigning priorities and accelerating decision-making: attacks can be stopped in their tracks and their impact mitigated with relevant, targeted, actionable threat intelligence
Daniel Solís, CEO & Founder, Blueliv, commented, “The cybercriminal ecosystem is rapidly modernizing and developing – its own industrial revolution. The process has been so profound and far-reaching that cybercrime can legitimately be called an industry in its own right. And just like our industry, collaboration is key and centered around knowledge exchange and enriching services. The reference document we’ve produced contains enriched intelligence for CISOs and threat analysts alike to help them fight cybercrime.”
As the cybercriminal ecosystem matures, most sectors continue to struggle with a cybersecurity skills shortage, along with managing the sheer volume of threats and alerts.
Solís continued, “Intelligence gathering goes far beyond feeds. It means putting the information into context. Intel in this report can be found in Blueliv’s Threat Context module: it offers a comprehensive collection of threat actor profiles, linked to relevant IOCs, fresh campaigns, weaponized tools and exploits, and their behavior mapped to MITRE ATT&CK techniques. Threat Context helps MSSPs and MDRs as well as CISOs and threat hunters do their jobs, and do them well.”
Blueliv’s report is a reference whitepaper for the cybersecurity industry. DARK COMMERCE: PART I is divided into sections that provide detail on: how cybercriminals acquire malicious code; what modifications can be made to improve it using packers/crypters and obfuscators; how to test its effectiveness using no-distribute antivirus scanners. It concludes with a section dedicated to how companies of all sizes can combat this illicit industry. The report can be downloaded free from Blueliv’s website: https://www.blueliv.com/threat-intelligence-dark-commerce-report-part-i/
ENDS
About Blueliv
Blueliv is Europe’s leading cyberthreat intelligence provider, headquartered in Barcelona, Spain. We look beyond your perimeter, scouring the open, deep and dark web to deliver fresh, automated and actionable threat intelligence to protect the enterprise and manage your digital risk. Covering the broadest range of threats on the market, a pay-as-you-need modular architecture means customers receive streamlined, cost-effective intelligence delivered in real-time, backed by our world-class in-house analyst team. Intelligence modules are scalable, easy to deploy and easy to use, maximizing security resource while accelerating threat detection, incident response performance and forensic investigations. Blueliv is recognized across the industry by analysts including Gartner and Forrester, and has earned multiple awards for its technology and services including ‘Security Company of the Year 2019’ by Red Seguridad, Enterprise Security and Enterprise Threat Detection 2018 category winners by Computing.co.uk, in addition to holding affiliate membership of FS-ISAC for several years.
Contact:
Josh Hoppen, Head of Communications, Blueliv
[email protected]
