Scott Small on Using Dark Web Threat Intelligence to Inform Security Decisions

The dark web is a murky place and is home to all sorts of nefarious activities. Threat intelligence is essential for keeping track of the latest threats and vulnerabilities on the dark web.

In this episode, host Zaira Pirzada speaks with Scott Small, Director of Cyber Threat Intelligence at Tidal Cyber. During the episode, Scott shares insights from his research and analysis, including how organized threat actor groups are lowering the barrier for entry to performing malicious activity. 

Topics discussed:

• Success stories from dark web threat intelligence.
• How threat actors leverage automation to stay ahead of the security community.
• How initial access brokers (IABs) sell access to follow-on threat actors. 
• How cybercrime is moving to a service-based economy.
• What dark web "shop talk" reveals about threat actor tactics, techniques, and procedures (TTPs).
• Why security professionals need to take dark web intel seriously to protect their organization.
• What security practitioners get wrong about dark web threat intelligence.

Resources Mentioned: 

• Control Validation Compass Threat modeling aide & purple team content repository: https://controlcompass.github.io/ 
• META OSINT: https://metaosint.github.io/ 
• TropChaud: https://github.com/tropChaud
• KELA Cyber Threat Intelligence: https://www.kelacyber.com