Threat Intelligence Center

Detection rules that identify malware infections

Overview
Threat Research

Nokia Threat Intelligence Lab focuses on the behavior of malware network communications. It develops detection rules that identify malware infections based on command-and-control communication and other network behavior. This approach enables fast detection of malware in Communication Service Providers' (CSP) networks.

The detection rules developed by the Threat Intelligence Lab form the foundation of Nokia NetGuard Endpoint Security (NES) solution.

Threat Intelligence Report 2020

Most recent security notes and research papers published by Nokia Threat Intelligence Lab

Remote Workers and Social Distancing Create New Opportunities for Threat Actors

With the “stay home” mandate around the world to prevent the spread of the Coronavirus, online collaboration tools and apps use has increased dramatically. However, the popularity of some of these apps tends to fall in line with their availability and ease-of-use with security and privacy only being an afterthought.

A growing cyber threat linked to COVID-19

As the COVID-19 virus spreads around the world, it’s little surprise that cybercriminals are exploiting people’s fears in attempts to steal data, gain personal information or deploy ransomware.

Compromised websites serving up Crypto-miner

Nokia's Threat Intelligence Lab became aware of a new browser-based Monero crypto-currency miner, originally identified by its authors as RiceWithChicken, which was being served up by otherwise benign websites.

Meltdown and Spectre

On January 3, 2018, the National Cybersecurity and Communications Integration Center (NCCIC) became aware of a set of security vulnerabilities — known as Meltdown and Spectre — that affect modern computer processors. Exploitation of these vulnerabilities could allow an attacker to obtain access to sensitive information.