Kraven Security published a weekly newsletter featuring an attack where attackers phished employees into installing Faronics Deploy, a real endpoint management platform, and then used its admin privileges to drop ScreenConnect.
Published
Signal category
Research & Knowledge
Quote
āAttackers phished employees into installing Faronics Deploy, a real endpoint management platform, then used its admin privileges to drop ScreenConnect. No loader. No malware. Just your own tooling category, used properly.ā
ā Adam Goss|Kraven Security team
Company
Kraven Security
We help businesses and individuals enhance their CTI processes, develop their skills, and make CTI actionable.
- Industry
- IT Services and IT Consulting
- Company size
- 2 employees
š Kraven Security transforms cyber security from reactive to proactive, empowering individuals and businesses to leverage Cyber Threat Intelligence (CTI) effectively. Many struggle with CTI due to a lack of knowledge, expertise, or time. We bridge this gap, providing guidance and tools to anticipate and neutralize cyber threats before they materialize. Our commitment ensures robust, agile, and forward-looking cyber security frameworks. We help you get ahead of cyber threats. š” Our mission is to empower organizations and individuals through strategic CTI application. We clarify objectives, demystify CTI usage, optimize operations, elevate professional skills, and bolster overall cyber security posture. Our focused approach provides deep, concentrated expertise in this critical and evolving field. š§ Many individuals and businesses struggle to effectively utilize Cyber Threat Intelligence, often citing a lack of foundational knowledge, specialized expertise, or dedicated time. Kraven Security has identified six common issues hindering organizations from leveraging threat intelligence: - Absence of a professional CTI program. - Ineffective processes and workflows. - Underutilization of tools and technologies. - Knowledge gaps in CTI application. - Untrained and underutilized employees. - Resource and budget constraints. ā We directly address these challenges, guiding clients to professionalize and streamline their CTI operations. - One-on-One Coaching: Elevate individual CTI skills or build robust CTI programs. - CTI Workshops: Gain expert guidance and actionable steps for your CTI journey. - Threat Modeling Workshop: Identify adversaries and inform your cyber security program. - Intelligence Requirements: Develop strong CTI requirements and tools for fulfillment. - Interview & Resume Assessment: Secure CTI roles or select top CTI talent. - TIP Workshop: Build your own automated Threat Intelligence Platform for enhanced efficiency.
Founded 2023