• Home
  • Security Intelligence Services

  • Read

    Click here to download our Incident Response Datasheet.


    Click here to download our Corporate Datasheet.


    Click here to download our Security Intelligence White Paper.

  • News and Events
    April 30, 2013 - Dark Reading: Chinese Cyberespionage: Brazen, Prolific, And Persistent - The APT1/Comment Crew appears to have done little to change its tactics and methods of attack even after it was unmasked with key intelligence from Mandiant. Cyber Squared last week unveiled new evidence of the group targeting the defense and aerospace community using many of the same techniques and command-and-control (C&C) capabilities as before.

    April 29, 2013 - The Register: Chinese cyber-spook crew back in business, say security watchers - Cyber Squared has been tracking numerous Chinese cyber espionage threat groups within ThreatConnect.com and crowd-sourcing threat intelligence with nearly 400 global security researchers. All signs suggest that “Comment Crew" and other Chinese APT threat groups are still conducting exploitation operations. In fact, there has been little change detected within "Comment Crew" operations.

    April 26, 2013 - USA Today: Cyberspying from North Korean IP addresses spike - Speaking of which, security start-up Cyber Squared on Thursday reported that the "Comment Crew" also known as "APT1" is back in action. You may recall this spy gang with ties to the Chinese military grabbed headlines a couple of months ago when forensics firm Mandiant released a detailed report of how the gang's day-to-day activities.

    Read More

    News and Events
    Register to attend Cyber Squared’s Threat Intelligence quarterly update webinar. Spend your lunch hour with our intelligence team on Wednesday, April 17th as they review noteworthy events, case studies, and ThreatConnect updates from the first quarter.

    April 13, 2013 - CSO: Targeted social media attacks said to be underreported - Security company Cyber Squared reported this week how three Chinese political activists in and outside of the country were sent tweets from Twitter that contained links to two compromised websites.

    April 10, 2013 - ThreatPost: Rogue Twitter Account Used in Targeted Attacks Against Free Tibet Supporters - Researchers at Cyber Squared, an Arlington, Va.-based security company, published their findings this week. The links in the tweets, analyst Wes Hurd wrote, led to a Tibet WordPress blog and a Chinese-language forum; both served up Adobe Flash exploits used in the past to attack aerospace companies as well as an online payroll provider.

    Read More

    News and Events
    March 21, 2013 - Alienvault Labs: New Sykipot developments - Cyber Squared Sykipot research was mentioned in this Alienvault Labs blog post. In the post, Alienvault Labs exposes several campaigns and new versions of the backdoor they have used to access the compromised systems.

    March 21, 2013 - The Register: Cyberspies send ZOMBIES to steal DRUGS from medical research firms - Cyber-espionage crews have been targeting the lucrative medical and life science industries using custom malware and spear-phishing, according to new research. Security intelligence firm Cyber Squared said that at least three distinct groups have targeted the industry for more than two years since 2010.

    March 14, 2013 - Dark Reading: Medical Industry Under Attack By Chinese Hackers - Multiple gangs of Chinese cyberespionage hackers are now targeting the healthcare and medical/life sciences industries. Most every industry is fair game for cyberespionage these days -- so it's no surprise that the healthcare and medical industry would come up on the list -- but, to date, it has been a field more abused by cybercriminals motivated by medical identity theft and other financial fraud.

    Read More

    News and Events
    March 15, 2013 - Tenable Blog: Searching for Custom Malicious File Hashes with Nessus - Cyber Squared mentioned in Tenable blog on Nessus malicious process detection plugins were recently enhanced to allow for searching with custom file hash lists. This allows organizations to add their own sources of malicious file hashes into Tenable's set of cloud-based hashes and botnet checks.

    February 27, 2013 - USA Today: Security tools reveal cyberintruders' trickery - Cyber Squared, for one, has built openness into its business model. The security start-up recently launched ThreatConnect.com, an online exchange where some 150 security researchers and 45 organizations convene around the clock to share data and brainstorm.

    February 27, 2013 - The Register: APT1, that scary cyber-Cold War gang: Not even China's best - Shanghai hackers APT1 - outed this month in a high-profile report that linked them to the Chinese military - may not be China's top cyber-espionage team despite its moniker. Security experts say the team is more prolific than leet.

    Read More

Security Intelligence Services

Why Cyber Squared protects you from cyber espionage

Your organization’s defensive capabilities are best supported by knowledge of sophisticated cyber threats to your network and business operations. At Cyber Squared, we transition our clients from a state of reactive security to proactive cyber security and do so in two ways.  

  • We fuse your business requirements with current intelligence to identify existing and emerging threats. This helps us determine your level of risk and develop effective security strategies customized for your organization.
  • We continually analyze cyber threats, evolutions, and permutations of the threats with one of the best teams in the cyber security business.  Our deep knowledge gives you an unparalleled ability to respond to cyber threats sometimes before they attack your network.

At Cyber Squared, our sole mission is to help defend and protect your organization.
 

Cyber Squared’s Security Intelligence Services

Cyber Squared offers onsite staffing for security operations and incident response teams. We provide experienced analysts in the following areas: forensics, malware analysis, network monitoring, and intelligence.

Our Security Intelligence services include: Incident Response, Threat Analysis, Threat Mitigation, Integrated Solutions, Malware Analysis, Threat Operations and Security Services.  Please click on the links below to read more about each one of these services.

Incident Response

Incident Response

Comprehensive Incident Response and Incident Handling services to help you manage any incidents of cyber-attack. - Our team of experienced analysts works to provide you with a thorough understanding of the situation. This may include: length of time your network has been compromised, targeting techniques, malware used, motive, possible data stolen, etc..
Malware Analysis

Malware Analysis

Provide malware and forensic analysis services - Our quick, reliable, dynamic, and behavioral analysis of malware will determine the changes made to infected systems, and provide preliminary host and network-based detection signatures. Our analysts can also perform in-depth reverse code engineering on malicious and unknown software to provide a deeper level of understanding of the author’s capabilities and intent.
Threat Analysis

Threat Analysis

Provide in-depth analysis of specific threats affecting your business - This includes a comprehensive picture of the threat’s infrastructure, analysis of all known malware used, targeting techniques, likely motives, and attribution. Given these facts, we advise you of the necessary measures to take to better secure your business processes.
Threat Mitigation

Threat Mitigation

Support threat mitigation and remediation for our clients - Through examination of how sophisticated cyber threats exploit gaps in network defenses and security policies, we identify risks to your organization’s business processes and tailor our response based on timeline, acceptable cost, requirements from legal authorities, and acceptance of risk.
Integrated Solutions

Integrated Solutions

Offer development and engineering services and solutions - With rapid prototyping, intelligence source integration, and dynamic defense research and development we can build security solutions for our clients that place an emphasis on defense against sophisticated threats.
Threat Operations

Threat Operations

Support threat operations so our clients can learn more about the threats facing their businesses - We utilize standard counter-intelligence tradecraft to advise clients as to how to be proactive against motivated and funded adversaries that threaten their network, functions, and business processes. Through tailored threat operations, we assist our clients in getting ahead of the threat.
Security Services

Security Services

Offer 365-day security services - Our security services combine forensic, malware, network monitoring, and threat intelligence analysts. We can supplement or fully staff our client's needs for security operations and incident response. Utilizing our expertise in security intelligence, our teams or individual analysts can start defending your network immediately.


Suggested reading: