Booz Allen Cyber4Sight provided critical threat intelligence for an INTERPOL-led operation which brought together investigators from Indonesia, Malaysia, Myanmar, the Philippines, Singapore, Thailand and Vietnam. With input from Booz Allen and six other private companies, INTERPOL generated and disseminated 23 cyber activity reports, identifying some 9,000 command-and-control (C2) servers, hundreds of compromised websites—many of them government portals—and a variety of criminals.
The joint public-private sector operation kicked off in January 2017, when participating countries were provided with packaged information designed to notify authorities of cybercriminals and threat actors operating in, or targeting, the Association of Southeast Asian Nations (ASEAN) region. Specialists from the INTERPOL Global Complex for Innovation’s Cyber Fusion Centre (CFC) worked closely with private sector experts to collect intelligence and draft a series of cyber activity reports, which included recommended actions to be taken by the national authorities in participating member states.
Cyber4Sight provided threat-actor centric reporting on active cybercrime across the ASEAN region in underground cybercriminal forums, including a threat actor profile focused on criminal attribution. Cyber4Sight’s findings included information pertaining to a criminal who was active both on underground criminal forums and the open Internet, selling phishing kits targeting a variety of banking and online retail websites and providing a YouTube tutorial and marketing videos.
“Information sharing initiatives like this INTERPOL-led operation are key to ensuring more organizations are prepared to defend against complex attacks,” said Christopher Ling, a Booz Allen executive vice president and leader of the firm’s international business. “Booz Allen is proud to have been selected to help with this important effort. We look forward to continue providing cyber intelligence support, building on our decades of experience assisting the government and commercial organizations, to INTERPOL and other partners in the ASEAN region.”
Booz Allen Cyber4Sight is uniquely capable of integrating near real-time cyber threat intelligence with observations of criminal activity on underground cybercriminal forums and marketplaces to produce threat actor-focused analysis. Our experienced team of deep web experts thoroughly understand the modern ecosystem of sophisticated and organized cybercrime, and are constantly monitoring the forums and marketplaces where these and lesser criminals operate.
We look forward to continuing our work with INTERPOL’s CFC and providing law enforcement with actionable threat intelligence that is critical for aiding complex cybercrime investigations and combating threats to global security.
Article Link: https://blog.cyber4sight.com/2017/04/booz-allen-cyber4sight-and-interpol-team-up-to-combat-cybercrime/