“Stealer Logs” menu screen in AhnLab TIP | Image provided by AhnLab
AhnLab, led by CEO Suk Kyoon Kang, has bolstered its next-generation Threat Intelligence Platform, ‘AhnLab TIP,’ with new monitoring functions focused on Telegram-based sensitive information distribution and ransomware, enhancing its threat intelligence capabilities.
The recent update to ‘AhnLab TIP’ includes introducing the ‘Stealer Logs’ menu for monitoring sensitive data leaks on Telegram channels, a ‘Ransomware Watch’ menu for focused ransomware trend monitoring, and expanded information on vulnerabilities. These additions address threats from commonly exploited attacks.
The ‘Stealer Logs’ menu monitors Telegram channels malicious actors use to distribute stolen data from info stealers, gathering information such as personal and account information in real time. Security administrators can review detailed data, including the compromised PC’s name, location, IP address, operating system, data leakage date, initial distribution date, and files generated from infostealer attacks.
Additionally, AhnLab upgraded the ‘Deep & Dark Web’ menu by adding a dedicated tab for searching account leaks and stolen information specifically distributed on Telegram. This enables security managers to continuously monitor and respond to data leaks associated with their organization.
‘AhnLab TIP’ now also includes a ‘Ransomware Watch’ menu, which provides focused monitoring of ransomware group activities. This feature tracks data posted by ransomware groups on Dedicated Leak Sites (DLS) and offers ransomware victim data collected through AhnLab’s monitoring efforts.
Security administrators can leverage ‘Ransomware Watch’ to understand ransomware trends, techniques, and threats. They can use detailed reports on active ransomware groups, their statistics, relationships, attack tactics, and threat and damage statistics. This helps them develop optimized threat response strategies for their organizations.
Additionally, ‘AhnLab TIP’ has strengthened its ‘Vulnerability Information’ to help prevent vulnerability exploitation. This attack exploits software bugs or design flaws to manipulate infected systems (such as PCs) into performing attacker-defined actions.
With the latest upgrade, AhnLab TIP provides hash lists for various files linked to software vulnerabilities. This allows security teams to proactively determine whether these vulnerabilities may affect their systems and counter potential exploits.
Changhee Kim, Head of Product and Service Planning Division at AhnLab, stated, “AhnLab TIP serves as a ‘Security Threat Content Hub’ at the center of AhnLab’s diverse and specialized threat intelligence,” adding, “AhnLab will continue to enhance AhnLab TIP’s threat intelligence to empower clients to respond to evolving security threats preemptively.”
Pangyo Techno Valley is a global integrated R&D hub focused on IT, BT, CT, and NT, integrating Research (R), People (P), Information (I), and Trade (T). As Gyeonggi-do’s representative innovation cluster, Pangyo Techno Valley was established to secure national new growth drivers such as technological innovation, human resource development, job creation, and enhancing international business competitiveness. As of 2023, 1,666 companies employ 78,751 people, and it has positioned itself as the most innovative hub in South Korea, with sales amounting to 167.7 trillion KRW (125.5 billion USD).
Furthermore, the Techno Valley Innovation Division of the Gyeonggi-do Business & Science Accelerator (GBSA) holds monthly events such as the Pangyo Evening Meet-Up, Pan-Pan Day, and the Pangyo Startup Investment Exchange “In-Best Pangyo” to maximize the value of Pangyo Techno Valley. They also support the Pangyo Overseas Promotion Program to publicize information about Pangyo’s companies, products, and services to domestic and foreign investors and the media, thereby facilitating foreign investment.
