Threat Intelligence
Q4 2023 Cyber Threat Landscape Report: Threat Actors Breach the Outer Limits
February 21, 2024
by Laurie Iacono, Keith Wojcieszek, George Glass
Cyber Threat Intelligence
Kroll's cyber threat intelligence services are fueled by frontline incident response intel and elite analysts to effectively hunt and respond to threats. Our team aligns Kroll’s technical intelligence, analytical research and investigative expertise to improve your visibility and provide expert triage, investigation and remediation services.
Talk to an ExpertUtilizing frontline threat intelligence from handling thousands of cyber incidents every year, our team can deliver more visibility against emerging threats and offer actionable steps to minimize risk and protect against operational and reputational damage. Our experts bring their combined experience in the U.S. Secret Service, the FBI, Fortune 100 and the National Cyber Forensic Training Alliance (NCFTA) to follow even the most obfuscated or opaque data trails.
How Threat Intelligence can Enhance Your Business
High-trust Frontline Intel Directly From IR Cases
Efficient Hunting and Threat Analysis
Enriched Threat Detection and Sharing
All Intel Vetted by Seasoned Analysts
Kroll cyber threat intelligence analysts cross-correlate a variety of open source, private feeds and dark web data with frontline data collected from thousands of annual incidents worked on by Kroll experts, filtering out false positives, duplicates and general noise. This unique formula enables timely, meaningful and actionable intelligence that empowers more efficient hunting, improves threat detection, provides domain monitoring, helps in complex litigation, and can preserve organizations’ operations and reputations.
Digital Footprint Intelligence
Digital Footprint Intelligence
Our analysts can determine the digital footprint of an organization based on intel gathered and analyzed from millions of data sources. We provide detailed insight into an organization’s digital exposure, which allows stakeholders to make better-informed business decisions. This includes:
- Would-be impact analysis of an incident for client and counsel
- Identify breach exposure and provide witness testimony as part of litigation
- Bespoke threat landscape briefings with actionable advice
- Cyber risk assessments and due diligence reports
- Social media and due diligence investigations
Example Engagement: Digital Footprint Intelligence
The Kroll team conducted a cyber security assessment and ran due diligence reports for a retail company that was looking to understand the cyber risks associated with the expansion of its digital footprint in a new market. Kroll helped the company identify region-specific threats, local litigation challenges and regulatory requirements. The insights were then used to inform decision-making, including risk mitigation strategies such as insurance policies.
Digital Threat Response
Digital Threat Response
Unique intelligence powers our rapid detection, response and remediation capabilities during a cybersecurity event. We utilize data from our thousands of incident response engagements to help determine how to best respond. We provide:
- Investigative support to provide insight during an active cyber incident
- Client data preservation services if confidential data is leaked or exposed
- Real-time intelligence curation to report on new and emerging tactics, techniques and procedures (TTPs)
Example Engagement: Digital Threat Response
A financial institution was targeted in a ransomware attack. Kroll was engaged for digital threat response, where our experts analyzed threat actor downloads, confirmed that the data was unique to the organization and assisted the company in understanding the access the threat actor obtained in their network and the data that was exfiltrated. This intelligence triggered further investigative action and public notification.
Digital Risk Protection
Our dark web monitoring and domain monitoring is run by experts with decades of experience, giving organizations visibility into their exposure through intelligence mining from the deep corners of the dark web. The insights generated allow firms to reduce the financial and reputational damage of a cyberattack.
Deep and Dark Web Monitoring
Our analysts will mine the dark web to determine clients’ exposure for either due diligence purposes or to assess the extent of compromised information.
Social Media Threat Monitoring
We will monitor common social media and chat platforms, including encrypted platforms, for suspicious activity or chatter. This service can be a one-time review or ongoing monitoring for real-time threat alerts.
Domain Monitoring and Brand Protection
We will help secure and preserve your organizations brand reputation by monitoring domains and alerting you to activity in order to protect against scams including phishing and social media that can be harmful to your brand.
Monitoring of Repository Services
Our team will examine existing repositories to look for any hidden keys or monitor suspicious activity.
Example Engagement: Dark Web Monitoring
A manufacturing company identified unauthorized access to its systems and engaged Kroll for a forensics investigation. Using dark web monitoring, the Kroll team identified corporate information on an underground cybercriminal forum. This information helped us focus investigative efforts, helped the client understand what data was accessed and provided guidance on how to proceed with client and employee notification.
Cyber Threat Hunting
Utilizing Kroll’s proprietary technology and enhanced hunting model, our threat analysts can rapidly search and pivot on TTPs, IOCs and emerging threat indicators to quickly identify possible threats seen across various environments. Our cyclical hunting model follows six steps:
- Data gathering (threat intelligence)
- Hypothesis formation
- Hunt scoping
- Hypothesis testing
- Novel threat identification and threat neutralization
- Review
Threat Intelligence Reporting
Through Kroll’s global intelligence intake, our team gathers and analyzes data to determine trends in the market and deeply understand the most popular and common cyber threats in today’s landscape.
Our team aggregates and breaks down data to provide the most helpful insights.
Enhance Investigations and Malware Analysis
Kroll’s threat intelligence services can provide further insight both before, during or after an incident. Our experts can help assess your exposure through advanced threat monitoring or help determine the scale of exposed data from a breach.
In conjunction with our threat intelligence insights, our analysts deliver actionable findings through in-depth technical analysis of benign and malicious code. We are able to not only identify and monitor for threats but also reverse engineer malware and provide triage analysis of any code-related event in order to enhance our recommendations for investigative next steps. Our Threat Intelligence team is your ultimate partner when it comes to assessing your organization’s exposure.
Threat Intelligence in a Cyber Risk Retainer
Threat intelligence can provide important insight into your organization’s exposure or help understand your digital footprint in your industry. Kroll clients can package threat intelligence services with Kroll’s cyber risk retainer, which gives you prioritized access to elite investigators and the flexibility to allocate incident response resources as well as all other cybersecurity solutions offered by Kroll.
Talk to a Threat Intelligence Expert
The threat landscape is evolving day by day. Partner with Kroll to leverage our frontline threat intelligence and experienced incident response professionals in order to keep your organization safe.
Threat Landscape Reports
Threat Intelligence
Threat Intelligence
Q3 2023 Threat Landscape Report: Social Engineering Takes Center Stage
November 15, 2023
by Laurie Iacono, Keith Wojcieszek, George Glass
Threat Intelligence
Q2 2023 Threat Landscape Report: All Roads Lead to Supply Chain Infiltrations
August 23, 2023
by George Glass, Laurie Iacono, Keith Wojcieszek
Threat Intelligence
Q1 2023 Threat Landscape Report: Ransomware Groups Splinter, Swarm Professional Services
May 17, 2023
by Laurie Iacono, Keith Wojcieszek, George Glass
Cyber Risk
Incident response, digital forensics, breach notification, managed detection services, penetration testing, cyber assessments and advisory.
24x7 Incident Response
Kroll is the largest global IR provider with experienced responders who can handle the entire security incident lifecycle.
Kroll Responder MDR
Stop cyberattacks. Kroll Responder managed detection and response is fueled by seasoned IR experts and frontline threat intelligence to deliver unrivaled response.
Cyber Risk Retainer
Kroll delivers more than a typical incident response retainer—secure a true cyber risk retainer with elite digital forensics and incident response capabilities and maximum flexibility for proactive and notification services.
Penetration Testing Services
Validate your cyber defenses against real-world threats. Kroll’s world-class penetration testing services bring together front-line threat intelligence, thousands of hours of cyber security assessments completed each year and a team of certified cyber experts — the foundation for our sophisticated and scalable approach.
Explore Insights
Threat Intelligence
Threat Intelligence
CVE-2024-3400: Zero-Day Remote Code Execution Vulnerability Exploited to Attack PAN-OS
April 23, 2024
by George Glass
Threat Intelligence
Akira Ransomware Makes a Play for VPNs Without Multi-Factor Authentication
April 19, 2024
by Laurie Iacono, Keith Wojcieszek, George Glass
Managed Detection and Response
The State of Cyber Defense: Diagnosing Cyber Threats in Healthcare
April 17, 2024
Threat Intelligence
Developing Your AI Business Strategy: Initial Considerations
April 12, 2024
by Josh Mitchell, Paul Connolly
Events
Cyber
Cyber
Kroll at RSA Conference 2024
May 6 - 9, 2024|Conference
Join Kroll experts at the RSA Conference in San Francisco May 6-9, 2024. Stop by booth 2239 in the South Expo Hall to meet our team.
Threat Intelligence
Q1 2024 Cyber Threat Landscape Virtual Briefing
May 29, 2024|Online
Join the Q1 2024 Cyber Threat Landscape Virtual Briefing as Kroll’s cyber threat analysts outline notable trends and insights from our incident response intelligence.
Financial Crime
Kroll Alternatives and Asset Management Compliance and Regulatory Conference
May 15, 2024|Conference
Join Kroll experts, along with Nike Trost and Howard Cornwell from the FCA, as they share insights on the regulatory landscape and its implications for the alternatives and asset management industry.
Kroll is headquartered in New York with offices around the world.
55 East 52nd Street 17 Fl
New York NY 10055
Sign up to receive periodic news, reports, and invitations from Kroll.
Our privacy policy describes how your data will be processed.
© 2024 Kroll, LLC. All rights reserved.
Kroll is not affiliated with Kroll Bond Rating Agency,
Kroll OnTrack Inc. or their affiliated businesses. Read more.