Managed Defense in Action
Tales from the Trenches
Ransom Insured
The FBI is the lead federal agency for investigating cyber attacks, warning organizations about any potential threats as part of their victim notification program. Often times, Mandiant Professional Services is who organizations rely on to quickly identify malicious activity and effectively respond. In this example, a large insurance company activated their Incident Response Retainer after being warned by the FBI about a targeted attack by a known threat actor that deploys ransomware and extorts victims for millions of dollars
WannaMine My Business
Breaches are inevitable, which is why it’s important to have a plan in place to act quickly and minimize the damage. FireEye was engaged by a government sector client to investigate a suspected breach, where at least one instance of WannaMine, cryptocurrency malware was discovered running as an admin on the client network. Find out how the FireEye Mandiant team effectively contained and eradicated the threat and was able to increase the security posture of the client’s environment in the process.
Cobalt Strikeout
Sometimes, malicious activity can be hiding in plain sight, masquerading as legitimate activity that turns out to be more than what it appears. Read more to see how one analyst’s intuition and probing led to collaborating with multiple team resources within FireEye to discover, attribute, and contain a threat in under 4 hours.
Spearphishing Takeout
Technology alone does not fully protect against today’s sophisticated cyber-attacks. FireEye Managed Defense analysts comprehensively and systematically hunt for evidence of activity from threat actors. Find out how frontline experience and home-grown tools enabled analysts to find and remove an attacker while helping to protect all FireEye customers in the process.
Learn more about DUOBEAN malware.
