Threat Intelligence Resources - Targeted Attacks & Security Threats

Advanced persistent threats (APTs) or targeted attacks pertain to computer intrusions by threat actors that aggressively pursue and compromise chosen targets. Enterprises consider targeted attacks high-priority threats because of the considerable impact previous victims have sustained. The very act of conducting business and using new technologies, platforms, and entities only broaden the attack surface.

Our recommendation has always been for enterprises to develop and harness external and local threat intelligence in tandem. This site aggregates threat research on targeted attacks in general and on specific campaigns we have been monitoring. In addition to local threat intelligence, these resources will help your IT/security team gain a comprehensive understanding of targeted attacks and approach the problem of defending against these threats with the proper mindset.

Detecting the Enemy Inside the Network

In targeted attacks, threat actors need to maintain constant covert communications with the compromised machine inside your network. Know how spotting this type of malicious network traffic can help you build an effective APT defense.

Without a doubt, attackers have recognized how effective email is as a means to deliver attack tools in targeted attack campaigns. Revisit how much email security is taken for granted despite its being a common entry point for targeted attacks.

Reports of highly targeted attacks have dramatically increased in number. These attacks most commonly target civil society organizations, business enterprises, and government/military networks. Given the targeted nature of these attacks, the distribution is low; however, the impact on compromised institutions remains high. Trend Micro researchers study and monitor targeted attacks and publish their major findings in technical write-ups you can find here.

Gaining Familiarity with Targeted Attacks

Attackers always look for ways to blend their malicious traffic with legitimate traffic to avoid detection. See how these try to disguise their network traffic like common instant messenger traffic.

Multiple ongoing APT campaigns can be consistently detected at the network level. Find out how to detect APT activity by leveraging threat intelligence in network traffic analysis.

Defensive strategies can dramatically improve by understanding how targeted attacks work as well as knowing trends regarding threat actors' tools, tactics and procedures. By effectively using threat intelligence derived from external and internal sources combined with context-aware data protection and security tools that empower and inform human analysts, organizations are better positioned to detect and mitigate targeted attacks.