Russia has long been a whispered frontrunner among capable nations for performing sophisticated network operations. In this paper, we discuss a threat group whose malware is already fairly well-known in the cybersecurity community. FireEye believes that this is an advanced persistent threat (APT) group engaged in espionage against political and military targets including the country ...

Cyber threat groups frequently design innovative ways to cover their tracks. In early 2015, a new malware emerged, which the analysts are calling HAMMERTOSS, from an advanced persistent threat (APT) group. The Russian attacker group that FireEye knows as APT29, employs HAMMERTOSS to compromise its targets. Using a variety of techniques – from creating an ...

Improving your security posture takes more than simply implementing a new solution. How can you continue to improve your ability to find and stop advanced attackers? The answer depends on your internal capabilities, existing investments, your tolerance for risk and many other factors. Our quick self-assessment will help you navigate to your next big decision. ...

Conventional security detects threats too late (if at all), and resolves them too slowly. Organizations need a flexible, deeply integrated framework that offers a far-reaching view of threats and evolves as quickly as conditions do. And it must take an active, “lean-forward” posture. FireEye calls this approach Adaptive Defense™. This two-part, educational series outlines this ...

Talking about the threat landscape is no substitute for experiencing it first-hand. “M-Trends 2015: A View from the Front Lines,” distills the insights gleaned from hundreds of Mandiant incident response investigations in more than 30 industry sectors. The report provides key insights, statistics, and case studies illustrating how the tools and tactics of advanced persistent ...

Traditional network and endpoint defenses are outmatched and don’t stand a chance at preventing, investigating, or remediating today’s targeted attacks. You need an advanced security solution, but you are struggling to convince your company’s executive team and Board to make the investment. If you want to make your case for investing in an advanced security ...

Conventional security detects threats too late (if at all), and resolves them too slowly. Organizations need a flexible, deeply integrated framework that offers a far-reaching view of threats and evolves as quickly as conditions do. And it must take an active, “lean-forward” posture. FireEye calls this approach Adaptive Defense™. This two-part, educational series outlines this ...

Users cannot keep up. They cannot tell which alerts are important. Urgent warnings get lost in the noise. When valid warnings do appear, security teams don’t know what to do with them. For truly effective protection, security leaders must focus on the ability to detect true threats, quality of alerts rather than the quantity. This ...

The Security Program Assessment follows a logical sequence of steps to help you answer the question “How secure do you want to be?” It starts with assessing your current situation based on 10 key areas, designing solutions to address the issues in your environment, creating a clear roadmap to transform your organization, and continuously monitoring ...

While we have seen modest gains in organizations’ ability to overcome the security gap, advanced (and not-so advanced) threat actors continue to evolve their tactics to find a way through it. The M-ternds report by Mandiant, provides a brief overview of the how attackers’ motives and tactics changed in 2014. It also shows various trends ...