Trending Evil is a quarterly publication that reveals the cyber threat actors, malware, and tactics that Mandiant Managed Defense has recently seen on the frontlines and equips you to strengthen your security posture with the defensive actions outlined in every edition.

Mandiant recently exposed the operations of FIN12, a financially motivated threat group specializing in the post-compromise deployment of ransomware, primarily RYUK, which we will discuss extensively in our upcoming webinar: Spooky RYUKy 3: The FINal Chapter.

Join us in this session where our specialist Tim Gallo will give an overview of Mandiant Advantage: Threat Intelligence and recently added features that will help you prioritize alerts and provide instant context directly from Mandiant’s frontline expertise.

With more frequent and sophisticated cyber-attacks, organizations face increased risk of missing critical threats. At the same time, the ability to find and retain expertise across cyber security functions continues to impact an organization's ability to implement effective cyber defenses.

We are wrapping up our “Big Four” series with a country that has been one to watch for quite some time: Russia. And who better to join me for this episode than our Vice President for Mandiant Threat Intelligence, John Hultquist. 

When a Security Operations Center (SOC) doesn't have the capabilities to detect WMI activity from both a network and endpoint perspective, the lack of visibility can provide threat actors a perfect opening for attacks. Here's how FireEye solves the problem.  

All cash transaction unlocks high-growth Mandiant Solutions business, Continued partnership after closing supports customers with reseller relationship and shared product telemetry and frontline threat intelligence, FireEye Board authorizes share repurchase program of up to $500 million

Ransomware is disruptive and costly. Threat actor innovations have increased the potential damage of ransomware infections in recent years, and this trend shows no sign of slowing down. Financially motivated actors will continue to evolve their tactics to maximize the profit generated from successful ransomware attacks.

Today’s threat actors are gaining in sophistication and motivation, and have greater opportunities to launch attacks with widespread enterprise cloud adoption and exponentially more connected devices. But you can outmaneuver attackers with Mandiant Compromise Assessment services from the global leader in incident response.

Connected devices are on the rise and here to stay. While they can make our lives much easier they also make easier targets for threat actors. Here we take a look at how someone could reverse engineer an embedded device, and at the process for attempting to find vulnerabilities.