IntelFinder insights
2025-08-28
One of the most common criticisms Android users have of Apple’s iPhone is that they do not allow any side loading of apps. Mobile apps on iPhone can only be downloaded from Apple’s app store, ensuring Apple has full control over its ecosystem. While this may somewhat change in the future due to European Union […]
Read article2025-06-21
Every now and then in the cyber security industry, there’s a news title that becomes explosive. “The Biggest DDoS in History”, “Massive Data Leak from Company X”, or “Researchers Discover a New Bleeding-Edge Tool in the Dark Web”, garners a lot of attention for a short while, resulting in CISOs and SOC teams scratching their […]
Read article2025-04-28
One of the major tools used by cybersecurity professionals is the WHOIS query. The query enables retrieval of information about a given domain – where it was registered, when it was registered, when it expires, what its name servers are, and more. This information can be crucial for brand protection, law enforcement investigations, and more. […]
Read article2025-04-13
Threat actors are always on the lookout for ways to monetize access to systems. While endpoints and cloud environments have long been favored targets, a new target is starting to trend in the dark web – access to DNS servers. A scroll through various dark web forums reveals multiple offers by threat actors selling access […]
Read article2025-04-13
On March 22nd 2025, cyber security company CloudSEK published an article on their blog claiming that they had come across a post on the dark web where a threat actor was selling data on 6 million user records from Oracle Cloud’s SSO and LDAP. The post was originally published two days earlier, on March 20th, […]
Read article2025-04-13
In the digital landscape, safeguarding your brand’s online presence is paramount and takedown services play a major role in it. By contacting Registrars and web hosting companies that host malicious content, takedown services are an effective instrument of removing such threats from the web. However, Registrars and web hosting companies usually only act on cases […]
Read article2025-02-11
According to Check Point Software, 2024 saw a significant increase in infection attempts by Infostealer logs, up by 58% from the previous year. Infostealers pose a growing threat to organizations across all industries, as leaked employee credentials could provide threat actors with opportunities to cause serious harm, enabling them to illegally access both internal resources […]
Read article2025-02-11
Many organizations face the threat of Phishing. Cybercriminals utilize Phishing attacks to obtain user credentials for whichever service they deem valuable – from internet service providers (the first recorded Phishing attacks targeted AOL users), to financial institutions and online services such as Netflix and Instagram. In order to protect their customers, organizations have no choice […]
Read article2024-12-02
Despite becoming a major threat over two decades ago, Phishing attacks are still a major technique used to steal credentials. Their use by threat actors hasn’t slowed down due to two main factors – they still require a relatively small amount of technical prowess to pull off, and they are still quite effective. Phishing attacks […]
Read article2024-11-11
The cybersecurity space has always had a problem with terminology. For example, Business Email Compromise (BEC Fraud) refers to incidents where threat actors gain access to a company’s Email address and use previous email communications to defraud existing relationships, such as customers or partners. However, in some cases of BEC fraud, threat actors don’t actually […]
Read article2024-10-23
The following article has been posted on the LinkedIn page of our new takedown service, CyberATS. We recommend following CyberATS‘s and IntelFinder‘s LinkedIn pages to get notified when new articles are posted. A bit over a month ago, on September 11th, Palo Alto Networks‘s Unit 42 reported on a new development in the Phishing space […]
Read article2024-10-13
At IntelFinder, we’ve always been at the forefront of delivering actionable threat intelligence to our clients. However, detecting a threat is merely the first step of keeping your organization secure. Therefore, for over a year and a half we have been working on a new service to support the second part of the remediation process – […]
Read article2022-01-11
It seems that there is one constant in cyber security, the feeling that the situation is dire. For years, anti-fraud and cyber security solutions have been lagging behind their adversaries, mostly due to the rise of malware. The innovation coming from cybercriminal circles known today as the dark web, specifically the HTML injections and Man-In-The-Browser […]
Read article2021-12-10
Dark web monitoring has become widely popular in the industry, with dozens of vendors, large and small, offering to extract intelligence from cybercriminal circles. In such a crowded market (Dark Web monitoring specifically and cyber security in general), vendors need to stand out from the pack. To do so, any cyber security company must have […]
Read article2021-09-17
The two main villains of the cyber security world are the nation state-backed Advance Persistent Threats (APTs) and cybercriminals, with their comprehensive infrastructure and circles known as the dark web. Both threat actors are independent, each with its own goals, actors and methods. However, over the years there has been quite a lot of cross-pollination […]
Read article2021-08-27
Cyberspace has been added to the fighting doctrine of almost all militaries today and for good reasons. One of the greatest advantages of attacking an enemy state through cyberspace is plausible deniability. Even if in the post-mortem of an attack the researchers are able to attribute it to a specific attacker, the attacker can always […]
Read article2021-07-25
Every few years a major threat emerges that dominates the attention of security vendors, start-ups, media and board meetings. APTs, IoT Security and Cloud Security are among such threats. Today, it is safe to say that Ransomware is dominating the conversation, especially after so many high profile incidents have been part of the news cycle, such as Colonial […]
Read article2021-06-15
Financial institutions have always been at the forefront of battling cybercrime. As one of the most targeted industries, they face multiple threats, such as phishing, spear phishing and banking malware. Even less sophisticated scams, such as 419 scams, often abuse their brands in order to add credibility to the scammers behind them. As these aforementioned incidents […]
Read article2021-05-05
It is a known fact that cybercriminals choose the path of least resistance. Naturally, easy cashout methods with good returns are much more favorable than methods that are high risk, complicated or yield small profits. While this is not the only factor in determining how much fraud is committed through a certain vector (for example, […]
Read article2021-03-24
Ever since the first dark web monitoring services became available, around 2005, consumers of such services often asked – why aren’t these websites being taken down? After all, the sites that comprise the dark web are platforms and tools for illegal activities. The answer, which used to satisfy most, was that these sites are intelligence sources and taking them […]
Read article2021-03-24
On February 19th, venture capital giant Sequoia disclosed to its investors that it has been the victim of a data breach. A few days later additional information became available, indicating that it was targeted in a Business E-mail Compromise (or BEC) attack. According to the company, attackers gained access to one of their employees’ corporate […]
Read article2021-03-12
Ever since Apple introduced its App Store in 2008 and Android followed suit, apps have become an integral part of our lives. With millions of apps available on each official store, they quickly became the de-facto way of obtaining and installing new software on a smartphone. However, while the vast majority of apps that are […]
Read article2021-02-26
The Dark Web has existed in its current form for over 15 years. While it has evolved and changed, the concept of threat actors, each with their own expertise, congregating in communities to trade their products and services has remained unchanged. For many years it was the focus of professionals, law enforcement agents and security […]
Read article2021-02-16
BEC Fraud (Business E-mail Compromise) has reached epidemic levels in recent years. In 2019, the FBI’s Internet Crime Compliant Center, reported that it received complaints with adjusted losses of over $1.7 billion from this type of scam. The reported cases to the IC3 is just a drop in the bucket compared to the overall amount of incidents online. […]
Read article2021-01-29
Certain threats that organizations face online often involve the attacker registering a domain that is very similar to the targeted organization’s domain. This is done to support the attacker’s goal, enabling them to better impersonates the company in order to fool potential victims, employees or customers. As Domains are relatively cheap and easy to register […]
Read article2021-01-19
In 2010, in a different world where no one has heard about lockdowns and social distancing, I wrote an article on SecurityWeek – The Optimist’s Cybercrime Predictions for 2011. While I was not very original in my choice of subject, as the end of every year provides security bloggers worldwide with an easy choice of subject to write […]
Read article2020-10-26
The fact that there is no silver bullet for cyber security, but instead every organization needs to work with a variety of vendors, has shaped the common practices of how we purchase security solutions. In many cases, there’s a checklist – we need a firewall, an end-point protection solution, a SIEM, a penetration service, a cloud […]
Read article2020-09-28
Cyber security always had a thing with terminology. Back in the day, its very name was the subject of many articles that tried to explain how “Cyber” is different than traditional infosec. The term “Advanced Persistent Threats” was also under scrutiny when it became popularized, with many experts claiming that certain nation-state attacks were not […]
Read article2020-09-02
The threat intelligence landscape has vastly changed over the years. While the term was originally used to refer to malware Indicators of Compromise (IOC) – lists of known malware signatures and the servers those malware communicate with, a method to identify infected devices within corporate networks – as time went by vendors have broadly expanded […]
Read article2020-08-10
Threat Intelligence Vendor IntelFinder Partners with ThreatConnect to Provide Integration with the Popular Threat Intelligence Platform HERZELIYA, ISRAEL — August 2020 IntelFinder is pleased to announce its integration with ThreatConnect®, as part of its participation in the ThreatConnect Developer Partner Program. As a member of the Developer Partner Program, IntelFinder can now offer ThreatConnect users […]
Read article2020-08-08
In my last column on SecurityWeek, I’ve provided tips on how to pick the best threat intelligence vendors to support the unique needs of your organization. While the column referred to threat intelligence vendors in general, my original idea for an article was to focus on dark web intelligence providers. After claiming most organizations may […]
Read article2020-07-15
Intelligence is an on-going process. You set it up – collection, processing, dissemination – based on certain work assumptions and then you continuously improve it using the results that you receive. Only through reviewing results can you expose commonalities across false positives, identify search queries that are too generic, or find any other issue. With […]
Read article2020-07-14
In May 2019, Flashpoint CEO Josh Lefkowitz shared in SecurityWeek tips for evaluating threat intelligence vendors that cover the deep and dark web. While indeed helpful for those who seek such services, as I have established in my previous column, not every company actually needs deep and dark web monitoring. Therefore, I wanted to look at the entire […]
Read article2020-06-25
One of the realities of every intelligence service is the need to balance false and true positives. If the criteria that is used to determine if something is suspicious is too permissive, too many intelligence alerts will be generated on findings that should not have been reported on, as they are not truly relevant. Alternatively, […]
Read article2020-05-28
In recent years, the “Dark Web” has become mainstream. In the past, this collection of forums, chat rooms, marketplaces and tools populated by cybercriminals and other types of threat actors, used to be known mainly to law enforcement agents, security professionals and fraud teams, who were responsible of protecting organizations from the threats that emanated […]
Read article2020-05-20
Cloud infrastructure has transformed organizations’ infrastructure forever. With almost instantaneous access to much needed computing power, as well as advanced technologies such as artificial intelligence, organizations were quick to adopt these services, propelling the companies behind them towards trillion-dollar valuations. The cloud revolution has enabled SaaS services, dramatically simplifying how companies and individuals do business. […]
Read article2020-04-14
Insider threats have always been a major issue in cyber security. The repetitive nature of certain aspects in today’s work, receiving and opening E-mails throughout the day can result in a lax attitude towards a secure behavior, by not paying enough attention to every individual action one performs. The massive amount of Phishing and malware […]
Read article2020-03-02
This week, despite fears of Coronavirus, tens of thousands of security professionals and hundreds of vendors descended on San Francisco for the 2020 edition of RSA Conference. Walking around in the exhibition floor, you could see some truly cutting-edge technologies, aimed at tackling organizations’ biggest security issues. The security industry is still playing catch-up after […]
Read article2020-02-19
For the past year, we at Inteller have been hard at work developing a new offering, one that is radically different than our existing product, the Inteller platform. Up until now, Inteller focused on building solutions for organizations that needed to monitor certain parts of the web as part of their core business, such as […]
Read article