Palo Alto Networks

AutoFocus

Review of Regional Malware Trends in EMEA: Part 1

As we head towards the end of the year it’s common to reflect on the year almost behind us and to predict what the new year approaching will bring in terms of security challenges. This blog is part of a series that describe malware trends seen in the EMEA (Europe Middle East and Africa) region over the last six months of 2016.

Unit 42

Dec 23, 2016

By Alex Hinchliffe

Palo Alto Networks

Products and Services

Partners

Technical Documentation

Tech Docs: 3 Ways to Own Your AutoFocus Experience

AutoFocus, our threat intelligence service, helps you prioritize the threat data that matters to you. Here are a few ways to customize it and make it your own:

Nov 09, 2016

By Patricia Cruz

News of the Week

Palo Alto Networks News of the Week – October 22, 2016

Did you miss any of this week’s Palo Alto Networks action? Don’t worry, we’ve rounded up the top news right here.

Oct 22, 2016

By Justin Hall

Cybersecurity

AutoFocus: Actionable Threat Intelligence Leads to Shorter Response Times

Following up on my initial post, AutoFocus: Your Answer to Actionable Threat Intelligence, this second post in the series provides another daily use case.

Oct 18, 2016

By Stephen Perciballi

Cybersecurity

AutoFocus: Your Answer to Actionable Threat Intelligence

Threat intelligence involves learning about new attacks, adversaries, campaigns, and malware families through distinct pieces of information often referred to as indicators of compromise, or IOCs. The more we m...

Aug 23, 2016

By Stephen Perciballi

Unit 42

Attack Delivers ‘9002’ Trojan Through Google Drive

Unit 42 recently observed a 9002 Trojan delivered using a combination of shortened links and a shared file hosted on Google Drive. The delivery method also uses an actor-controlled server hosting a custom redir...

Jul 26, 2016

By Robert Falcone and Jen Miller-Osborn

Events, News of the Week

Palo Alto Networks News of the Week – July 23, 2016

Unit 42 found Andromeda malware targeting Italian users in recent spam campaigns, and shared a technical walkthrough of the Office Test persistence method used in recent Sofacy attacks. The team also discovered...

Jul 23, 2016

By Anna Lough

Threat Prevention, Uncategorized, Unit 42

Technical Walkthrough: Office Test Persistence Method Used In Recent Sofacy...

As mentioned in our previous blog, we observed the Sofacy group using a new persistence mechanism that we call “Office Test” to load their Trojan each...

Jul 20, 2016

By Robert Falcone

Malware, Threat Prevention, Unit 42

Andromeda Botnet Targets Italy in Recent Spam Campaigns

Over the past month, Palo Alto Networks has observed two spam campaigns targeting users residing in Italy. The spam emails attempt to install the pervasive Andromeda malware onto victim machines. This malware h...

Jul 18, 2016

By Josh Grunzweig and Brandon Levene

Technical Documentation

Tech Docs: Get to Know the AutoFocus API

Are you ready to harness the power of the AutoFocus threat intelligence service in your own service or app? Watch this video to learn how you can use the AutoFocus portal to easily create API requests.

Jul 18, 2016

By Jatin Billimoria

Malware, Threat Prevention, Unit 42

How to Track Actors Behind Keyloggers Using Embedded Credentials

This past year Unit 42 has seen a resurgence of keylogger activity and it seems like every week a new research blog comes out talking about one of fou...

Jul 12, 2016

By Jeff White

Channel Scoop, Partners

Channel Scoop – June 24, 2016

Sit back and relax. Let us do the information gathering and give you the channel scoop. (more…)

Jun 24, 2016

By Lang Tibbils

Events, News of the Week

Palo Alto Networks News of the Week – June 18

Unit 42 identified a spear phishing attack from the Sofacy group targeting the United States government. The news was covered by SecurityWeek and Ars Technica, among others.

Jun 18, 2016

By Anna Lough

Malware, Threat Prevention, Unit 42

Extending AutoFocus Threat Intelligence With New Tag Types

In previous posts we have discussed how AutoFocus accelerates the analysis, hunting, and incident response workflows by providing full context for thr...

Jun 17, 2016

By Mike Scott

Cybersecurity, SCADA & ICS

How to Prevent Ransomware in Industrial Control Systems

Del Rodillas, our solution lead for SCADA & Industrial Control Systems, recently appeared in Electric Light & Power to discuss ransomware as an emerging threat for Operational Technology environments. W...

Jun 08, 2016

By Chad Berndtson

Channel Scoop, Partners

Channel Scoop – June 3, 2016

Sit back and relax. Let us do the information gathering and give you the channel scoop.Sit back and relax. Let us do the information gathering and give you the channel scoop.

Jun 03, 2016

By Lang Tibbils

Technical Documentation

AutoFocus Pro Tip: Quick Search

Did you know you can quickly search AutoFocus to look for samples with certain artifacts? Watch this short clip to see Patricia Cruz, Technical Writer at Palo Alto Networks, demonstrate this feature in action!

May 31, 2016

By Charissa Fleischer

Financial Services, Malware, Threat Prevention, Unit 42

The OilRig Campaign: Attacks on Saudi Arabian Organizations Deliver Helmint...

In May 2016, Unit 42 observed targeted attacks primarily focused on financial institutions and technology organizations within Saudi Arabia. Artifacts...

May 26, 2016

By Robert Falcone and Bryan Lee

Malware, Unit 42

Operation Ke3chang Resurfaces With New TidePool Malware

Little has been published on the threat actors responsible for Operation Ke3chang since the report was released more than two years ago. However, Unit 42 has recently discovered the actors have continued to evo...

May 22, 2016

By Micah Yates, Mike Scott, Brandon Levene, Jen Miller-Osborn and Tom Keigher

Events, News of the Week

Palo Alto Networks News of the Week – May 7

We’ve rounded up all of the top Palo Alto Networks news from the past week right here.Unit 42 identified and collected over 40 variants of a previously unpublished malware family and found Infy Malware active i...

May 07, 2016

By Anna Lough

Threat Prevention, Unit 42

AutoFocus Lenz: Taking the Blue (Team) Pill

The Palo Alto Networks AutoFocus threat intelligence services accelerates analysis and response workflows for unique, targeted attacks. The services further make an immense set of threat intelligence available...

May 03, 2016

By Jeff White

Load more blogs