Threat Intelligence Resources - Targeted Attacks & Security Threats

Advanced persistent threats (APTs) or targeted attacks pertain to computer intrusions by threat actors that aggressively pursue and compromise chosen targets. Enterprises consider targeted attacks high-priority threats because of the considerable impact previous victims have sustained. The very act of conducting business and using new technologies, platforms, and entities only broaden the attack surface.

Our recommendation has always been for enterprises to develop and harness external and local threat intelligence in tandem. This site aggregates threat research on targeted attacks in general and on specific campaigns we have been monitoring. In addition to local threat intelligence, these resources will help your IT/security team gain a comprehensive understanding of targeted attacks and approach the problem of defending against these threats with the proper mindset.

Detecting the Enemy Inside the Network

How Tough Is It to Deal with APTs?

Threat actors will adapt, adjust, and improve their methods based on their victims' defenses. Get to know the six stages of a targeted attack and what your IT team can do to prepare against such.

Reports of highly targeted attacks have dramatically increased in number. These attacks most commonly target civil society organizations, business enterprises, and government/military networks. Given the targeted nature of these attacks, the distribution is low; however, the impact on compromised institutions remains high. Trend Micro researchers study and monitor targeted attacks and publish their major findings in technical write-ups you can find here.

New Infection Vectors

Adding Android and Mac OS X Malware to the APT Toolbox

In the course of monitoring Luckycat servers, our researchers discovered two malicious APKs indicating that threat actors are actively moving toward broadening the possible entry points to a network. See how they try to add mobile to their list of tools.

Defensive strategies can dramatically improve by understanding how targeted attacks work as well as knowing trends regarding threat actors' tools, tactics and procedures. By effectively using threat intelligence derived from external and internal sources combined with context-aware data protection and security tools that empower and inform human analysts, organizations are better positioned to detect and mitigate targeted attacks.