@RiskIQ

RiskIQ is the leader in attack surface management. A subsidiary of @Microsoft, we help organizations discover, understand, and mitigate threats and exposures.

 San Francisco, CA
riskiq.com
Joined August 2009
  • Tweets5K
  • Following3.4K
  • Followers10.9K
456Media
Microsoft customers can get ongoing analysis and access additional threat actor details, related detections, IOCs, and hunting queries through Intel Profiles in Microsoft Defender Threat Intelligence and Threat Analytics in Microsoft 365 Defender.
Screenshot of Intel Profile on threat actor Volt Typhoon in Microsoft Defender Threat Intelligence

ALT Screenshot of Intel Profile on threat actor Volt Typhoon in Microsoft Defender Threat Intelligence

1
7
67
15,842
Catch the top announcements in AI, identity, data protection, and endpoint management from #MSSecure. Read the blog: msft.it/6013gBkKT #InfoSec
Text reads "Explore highlights from Microsoft Secure." Person smiling, holding tablet.

ALT Text reads "Explore highlights from Microsoft Secure." Person smiling, holding tablet.

27
149
10
816
2,818,495
I created a public @RiskIQ project with domains and IP addresses which @citizenlab has linked to Pegasus infrastructure over the years. Sadly no way to indicate a timeframe for each of the entries. community.riskiq.com/project…
11
2
32
Feeling inspired after #MSIgnite? Check out our collection of educational resources to get the most out of innovations across cloud security, threat protection, and more: msft.it/6011dnvrx #CybersecurityTraining
Text reads "Protect everything with comprehensive yet simple security."

ALT Text reads "Protect everything with comprehensive yet simple security."

1
8
11
It's Cybersecurity Awareness Month! This year, we highlight these four best practices: 1. Enabling multifactor authentication 2. Protecting your identity 3. Updating software 4. Recognizing #Phishing Learn more: msft.it/6011dHz75 #BeCyberSmart
Text reads "Let's be cyber smart together." Two people collaborating sitting at a desk.

ALT Text reads "Let's be cyber smart together." Two people collaborating sitting at a desk.

5
52
6
84
🔎 The threat hunt concludes with the second blog in our series. Learn about our hunting strategies and approach to threat intelligence innovation through openness and transparency: msft.it/6010jfZgs #ThreatHunting #IncidentResponse

The art and science behind Microsoft threat hunting: Part 2 | Microsoft Security Blog

The Microsoft Detection and Response Team outlines the threat hunting strategies used in incident response to conduct deep investigation.

microsoft.com
20
23
Brush up on the basics: What is malware? Learn about how malware works, the common types, and how you can detect and remove it: msft.it/6010jLosA #Malware #CybersecurityTips
Text reads "Defining malware."

ALT Text reads "Defining malware."

11
2
20
Watch Vasu Jakkal and Charlie Bell share fresh insights about today’s threat landscape. Register for this digital event now: msft.it/6012jmNBK #BeFearless #ThreatIntelligence
11
1
16
Ransomware has a new business model based on extortion. A newly released threat intelligence brief provides the latest insights and data on ransomware​. Learn more: msft.it/6011jiNKX #CyberSignals #Ransomware
Text reads, "80% of ransomware attacks can be traced to common configuration errors."

ALT Text reads, "80% of ransomware attacks can be traced to common configuration errors."

4
38
3
55
Threat intelligence that’s relevant, timely, and actionable. Learn what’s new in security at this digital event. Register now: msft.it/6016jM4VA #BeFearless #ThreatIntelligence
Text reads "Stop Ransomware with Microsoft Security. See the latest threat intelligence solutions in action. Digital event. September 15, 2022."

ALT Text reads "Stop Ransomware with Microsoft Security. See the latest threat intelligence solutions in action. Digital event. September 15, 2022."

14
14
Join Charlie Bell at the Stop Ransomware with Microsoft Security digital event to learn how threat intelligence can help organizations prepare for the worst. Register now: msft.it/6017jZvsN #MicrosoftSecurity #ThreatIntelligence

Ransomware

1
16
27
Microsoft has disrupted activity by SEABORGIUM, a Russia-based actor launching persistent phishing, credential and data theft, intrusions, and hack-and-leak campaigns tied to espionage. More details + TTPs in this MSTIC blog: msft.it/6018jVwFO

Disrupting SEABORGIUM’s ongoing phishing operations | Microsoft Security Blog

The Microsoft Threat Intelligence Center (MSTIC) has observed and taken actions to disrupt campaigns launched by SEABORGIUM in campaigns involve persistent phishing and credential theft campaigns...

microsoft.com
2
161
21
288
See demos of Microsoft Defender Threat Intelligence and Defender External Attack Surface Management. Register now: msft.it/6018jRx1I #BeFearless #ThreatIntelligence
Text reads "Stop Ransomware with Microsoft Security. See the latest threat intelligence solutions in action. Digital event. September 15, 2022."

ALT Text reads "Stop Ransomware with Microsoft Security. See the latest threat intelligence solutions in action. Digital event. September 15, 2022."

15
26
During a cyberattack, every second counts. See a year’s worth of cybercrime through a single 60-second window: msft.it/6010jKC12 #SecurityInsider #Cyberattack
Text reads "Cyberthreat minute. Breaking down the volume and cost of worldwide cybercrime in 60-seconds intervals."

ALT Text reads "Cyberthreat minute. Breaking down the volume and cost of worldwide cybercrime in 60-seconds intervals."

1
22
21
Microsoft puts its RiskIQ acquisition to work tcrn.ch/3Sjndwv by @fredericl
15
31
Microsoft discovered and patched a 0-day exploit (CVE-2022-22047) that #KNOTWEED, an Austria-based private sector offensive actor, used to deploy #Subzero malware. Analysis of campaigns, tactics, & payloads in this #MSTIC blog w/ @msftsecresponse @RiskIQ: msft.it/6017j1vJ1

Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits | Microsoft...

MSTIC and MSRC disclose technical details of a private-sector offensive actor (PSOA) tracked as KNOTWEED using multiple Windows and Adobe 0-day exploits, including one for the recently patched...

microsoft.com
6
291
43
512
.@MsftSecIntel analysts track H0lyGh0st, a threat actor group targeting small and midsize businesses. Here are actions to take to detect these malware families: msft.it/6017bAHxv #H0lyGh0st #Ransomware
1
23
26
🔒 Security can get complicated. Let's make it easier to understand. Explain it like I’m five: What is Zero Trust? Leave a one-sentence reply to help others learn! ⬇️ #InfoSec #ZeroTrust
Text reads "Explain it like I'm five. Zero Trust."

ALT Text reads "Explain it like I'm five. Zero Trust."

12
30
2
51
We observed notable updates to the long-running malware campaign targeting Linux systems by a group known as the 8220 gang. The updates include the deployment of new versions of a cryptominer and an IRC bot, as well the use of an exploit for a recently disclosed vulnerability.
5
126
21
269
We updated our comprehensive blog on ransomware-as-a-service with information on recently observed activities from DEV-0193 (Trickbot LLC), DEV-0504, DEV-0237, and DEV-0401, and a new section on Qakbot campaigns that lead to ransomware deployments: msft.it/6013bWxOf
91
1
183
Load more