How Darknet Exposure Shapes Cyber Risk for Individuals and Organizations

· Original article ↗

Summary

The article explains how darknet exposure can raise cyber risk for individuals and organizations, covering ransomware extortion, phishing, credential stuffing and third-party exposure, along with risk factors and basic mitigations.

Key points

  • The article frames cyber risk around threats, vulnerabilities and consequences, with likelihood, impact, intent and targeting affecting assessments.
  • DarkOwl says it observed 144 companies and nonprofits mentioned on REvil’s leak site from April through December 2020; the article notes this does not capture the full volume of compromised information.
  • Corporate risks discussed include ransomware extortion, data loss or disruption, phishing targeting executives, and exposure through vendors and other third parties.
  • The article says darknet exposure can include personal identification and financial data, which criminals may use for phishing, social engineering, identity theft or fraud.
  • Credential stuffing tests previously exposed email and password combinations against other services; the article cites a 3.2-billion-entry breach compilation shared on a darknet forum.
  • Suggested individual mitigations include using unique passwords and password managers; the article also describes contacting a bank and replacing a compromised account when sensitive identity information is exposed.
  • The article presents monitoring darknet mentions of organizations, executives and network information as a potential risk indicator, not proof of an impending attack.

Article Details

Topic
How darknet exposure and threat intelligence inform cybersecurity risk assessments for individuals and organizations.

Threat Actors

Vendors

Industries

Related Articles