Understanding Risk to Corporations and Individuals
September 16, 2022
DarkOwl analysts review the domain of risk, taking a closer look at the threats corporations and individuals face and how risk is calculated and mitigated.
DarkOwl analysts review the domain of risk, taking a closer look at the threats corporations and individuals face and how risk is calculated and mitigated.
Industrial control systems (ICS) and their adjacent operational technologies (OT) governs most everything societies rely on in the modern age. Manufacturing facilities, water treatment plants, mass transportation, electrical grids, gas, and oil refineries… all include some degree of ICS/OT incorporated in their industrial processes. Research from DarkOwl analysts identifies an alarming number of threats on the darknet and deep web that could effectively target and compromise Critical Infrastructure.
DarkOwl’s Glossary of Darknet Terms is a continually evolving resource that defines the common vernacular, slang terms, and acronyms that our analysts find in places like underground forums, instant
messaging platforms (such as Telegram), as well as in information security research pertaining to the darknet.
The darknet and deep web are vast sources of structured, semi-structured and unstructured data that requires advanced architecture to collect, process, analyze, and distribute meaningful and targeted datasets to clients and users across diverse industry verticals. This includes FinTech, InsureTech, Identity Protection and Threat Intelligence providers. DarkOwl employs a modified model of “Big Data” often depicted by the “V’s” of Big Data.
A global cyberwar emerged in the wake of the Russian invasion of Ukraine in February of 2022, with targets spanning from private government agencies to large commercial enterprises. DarkOwl analysts have identified critical leaks across major key sectors, including those amongst cyber hacktivists and threat actors themselves.
Many ransomware attacks are comprised of key stages that, when viewed on a larger scale, form a picture that represents a cyclical ransomware ecosystem that feeds various industries in the darknet. DarkOwl analysts outline ransomware attack key stages.
The darknet (or “dark web”) is a thriving ecosystem within the global internet infrastructure that many organizations struggle to incorporate into security posture, but is becoming an increasingly vital component. In certain cases, that is because taking raw data and turning it into actionable security intelligence requires leveraging DARKINT – or data points sourced from the darknet and other OSINT sources that together form a risk and/or investigative portfolio.
In honor of World Password Day, our analysts have compiled some interesting statistics based on the email and password entities available in the DarkOwl Entity API.
The darknet is fundamentally changing the landscape on who, where and how cyber crimes are perpetrated. This infographic outlines stats around just how much the darknet is growing.
In recent months, DarkOwl has observed a significant increase in instances of malware developers mentioning or discussing direct attacks to the international software supply chain. In many cases, this chatter was centered around plans that involved targeting popular open-source software developer repositories like Github and Bitbucket, as well as associated software digital support infrastructure.
Research from DarkOwl analysts continues to indicate that software development and engineering tools are a viable exploitation vector.