Studio 471

Intel 471

Join us into the world of cybercrime. Studio 471 brings you the latest trends, emerging threats, and expert advice to arm you with the insights needed to protect your business. By unraveling the mysteries of the underground, our series empowers teams, organizations, and communities to make informed decisions and discover actionable strategies to safeguard your digital footprint.

  1. 1d ago

    Defending against doxing ft. Jacob Larsen, Threat Researcher, Offensive Security Lead, CyberCX

    Jacob Larsen was involuntarily pulled into the dark world of doxing, which is the practice of publishing sensitive personal information about someone online with the intent of intimidating, harassing or extorting them. Larsen’s assailants wanted him to turn over a short username he held for an online game. He refused to be extorted and instead began studying doxing in his free time and even interviewed threat actors who run Doxbin, one of the most prominent doxing sites. In this Studio 471, Larsen discusses the effects of doxing, how sites like Doxbin take advantage of legal loopholes and how to defend against being doxed. Participants:Jacob Larsen, Threat Researcher, Offensive Security Lead, CyberCXJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  2. Aug 11

    Fingerprinting threat actors by their anonymity techniques ft. Mick Deben DMC Group | Studio 471

    Threat actors doing crime online use a variety of precautions and technologies to avoid getting caught. Mick Deben is a cybersecurity consultant with DMC Group in the Netherlands. He recently completed his master’s degree thesis, which focused on creating a knowledge base around these anonymity techniques. The knowledge base is called Concealment Layers for Online Anonymity and Knowledge (CLOAK), and it’s intended to give CTI practitioners another way to fingerprint threat actors. In this Studio 471, Deben discusses how he developed CLOAK and how practitioners can use it. Participants:Mick Deben, Cybersecurity Consultant, DMC GroupJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  3. Aug 4

    Managing a cyber crisis ft. Tom Bolitho, Cybersecurity & Data Privacy Communications, FTI Consulting

    Most organizations will be touched by an IT security incident at some point whether it be a data breach, ransomware or fraud. These complex incidents may draw attention from consumers, the media, customers and partners as well prompt legal and regulatory inquiries. This is when organizations’ crisis communications plans are put to the test. How can organizations control the narrative? How can they manage requests for more detail while forensic investigations are underway? What if threat actors drip-feed samples of stolen data? In this Studio 471, Tom Bolitho of FTI Consulting shares how IT security incidents can be managed to minimize reputational damage. Participants:Tom Bolitho, Senior Director, Strategic Communications, Cybersecurity & Data Privacy Communications, FTI ConsultingJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  4. Jul 28

    Writing high-quality IDS detection rules ft. Eindhoven University of Technology on Studio 471

    Security operations centers, or SOCs, are a core defensive component for organizations.  Quickly processing alerts can give a clue if an organization is under attack. But the volume and quality of alerts can greatly vary depending on how well the detection rules have been written. Some rules may return too many low-quality alerts, which can distract analysts from more important ones. Luca Allodi and Koen Teuwen of Eindhoven University of Technology co-authored a recent academic study that examines how to write lower-noise rules for intrusion detection systems (IDSs). The researchers developed six design principles for rule writing that balance specificity with coverage. The aim is to help analysts make better sense of what’s going on in their networks. The research also resulted in the development of a command-line tool, suricata-check, which gives feedback on how a rule written for the Suricata open-source IDS can be improved. Participants:Luca Allodi, Associate Professor and head of the Threat Analysis group within the Security Cluster of the Eindhoven University of TechnologyKoen Teuwen, PhD Candidate at Eindhoven University of TechnologyJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  5. Jul 21

    The evolution of Russian cybercrime

    Roman Sannikov immigrated with his parents from Russia to the United States when he was a teenager. Through his parents, he kept up his Russian-language skills. For more than two decades, he worked as an interpreter for the FBI and U.S. Department of Justice, interviewing cybercriminals and even secretly acting as a moderator of a top but now-defunct Russian language cybercriminal forum. He has worked cyber threat intelligence (CTI) and blockchain analysis companies including Recorded Future, Flashpoint and TRM Labs. He now runs Constellation Cyber, a CTI consultancy based in New York. In this Studio 471, Sannikov shares his insight into the Russian cybercriminal landscape, the evolution of online crime and what lies ahead with ransomware. Participants:Roman Sannikov, Founder, Constellation CyberJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  6. Jul 14

    How threat actors are using artificial intelligence featuring Ashley Jess on Studio 471

    Artificial intelligence is a red-hot mess, filled with contradicting predictions over whether it will bring vast benefits. From a cybercriminal perspective, AI is already providing productivity gains, from reconnaissance to drafting phishing emails to help in creating scripts and code. Ashley Jess, senior intelligence analyst with Intel 471, says threat actors in 2024 developed AI tools for specific tasks, such as data exfiltration and analysis tools designed for ransomware and data extortion groups. The cost of these tools has fallen significantly since 2022, increasing their diversity as well as their availability. Threat actors are using a combination of open-source models such as Meta’s Llama and API access to others. In this Studio 471, Jess shares her insight into how AI will shape the threat landscape. Participants:Ashley Jess, Senior Intelligence Analyst, Intelligence Operations, Intel 471Jeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  7. Jul 7

    Extracting Useful Cyber Threat Intelligence from Underground Markets | Studio 471

    The advent of cybercrime-as-a-service – where cybercriminals create tools and products for use by other cybercriminals – has revolutionized online crime, allowing it to scale and become more effective. The discussions and products in underground forums and marketplaces can give clues as to how cybercriminals are exploiting and profiting. But these markets can be sprawling. Extracting useful cyber threat intelligence about emerging threats and monitoring the rise of novel threat actors can be a challenge. Michele Campobasso completed his doctoral thesis in 2024 about these issues while at the Eindhoven University of Technology. In this Studio 471, Campobasso shares his insight into these markets and how to maximize CTI collection. Participants:Michele Campobasso, PhD, Eindhoven University of TechnologyJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  8. Jun 30

    Using CTI in Realistic Attack Simulations, Cyber Operational Resilience Intelligence-led Exercises

    Australia holds regular attack simulation exercises to test the cyber resilience of the financial services sector. These exercises, called Cyber Operational Resilience Intelligence-led Exercises (CORIE), are designed to be as realistic as possible, drawing on targeted cyber threat intelligence to create attack scenarios. By using tactics, techniques and procedures (TTPs) that match active threat groups, organizations can learn their potential weak points and improve. In this Studio 471, two experts from the cybersecurity consultancy CyberCX discuss how these exercises are developed and executed. Participants:Diego Silva, Technical Principal, Cyber Threat Intelligence, CyberCXWillem Mouton, Technical Director of Adversary Simulation, CyberCXJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

See All (22)

About

Join us into the world of cybercrime. Studio 471 brings you the latest trends, emerging threats, and expert advice to arm you with the insights needed to protect your business. By unraveling the mysteries of the underground, our series empowers teams, organizations, and communities to make informed decisions and discover actionable strategies to safeguard your digital footprint.

Information

  • Creator
    Intel 471
  • Years Active
    2026
  • Episodes
    22
  • Rating
    Clean
  • Copyright
    © Intel 471
  • Show Website
    Studio 471