Palo Alto Networks

AutoFocus

Introducing AutoFocus: Actionable Threat Intelligence

There is a change happening within the security industry. There has never been a greater accumulation of security data available to organizations, in as many forms, from as many sources, as we have today. The mantra has consistently been, “more data is better,” with the hope that this influx would result in increased protection ...

Announcement

Cybersecurity

Security Platform

Sep 29, 2015

By Scott Simkin

Palo Alto Networks

Products and Services

Partners

Malware, Threat Prevention, Unit 42

Chinese Actors Use ‘3102’ Malware in Attacks on US Government and EU Media

On May 6 and May 11, 2015, Unit 42 observed two targeted attacks, the first against the U.S. government and the second on a European media company. Th...

Sep 23, 2015

By Robert Falcone and Jen Miller-Osborn

Cybersecurity, Interview, Security Platform, Threat Prevention

Watch: Mark McLaughlin Talks Prevention, Automation and Cyber Threat Intell...

Mark McLaughlin, our Chairman, President and CEO, went on CNBC’s Squawk on the Street Thursday to talk with Jon Fortt about the demand for cybersecuri...

Sep 10, 2015

By Chad Berndtson

Malware, Threat Prevention, Unit 42

Musical Chairs: Multi-Year Campaign Involving New Variant of Gh0st Malware

The Gh0st malware is a widely used remote administration tool (RAT) that originated in China in the early 2000s. It has been the subject of many analy...

Sep 08, 2015

By Brandon Levene, Robert Falcone and Jen Miller-Osborn

Fuel User Group

Spark User Summit Amsterdam Agenda is Live

The agenda for the upcoming Spark User Summit Amsterdam is now available.Spark User Summits, hosted by Fuel User Group, are unique opportunities for users to meet, learn from each other, participate in hands-on...

Sep 07, 2015

By Megan Scofield

Malware, Threat Prevention, Unit 42

Banking Trojan Escelar Infects Thousands In Brazil and the US

Unit 42 for the past three months has been tracking a banking Trojan targeting victims in Brazil and the United States. Escelar originally surfaced in...

Aug 27, 2015

By Josh Grunzweig

Cybersecurity, Threat Prevention, Unit 42

RTF Exploit Installs Italian RAT: uWarrior

Unit 42 researchers have observed a new Remote Access Tool (RAT) constructed by an unknown actor of Italian origin. This RAT, referred to as uWarrior because of embedded PDB strings, has been previously describ...

Aug 24, 2015

By Brandon Levene, Robert Falcone, Tomer Bar and Tom Keigher

Financial Services, Malware, Threat Prevention, Unit 42

Retefe Banking Trojan Targets Sweden, Switzerland and Japan

Retefe is one of the most targeted banking Trojans currently in the wild. While other families such as Zeus and Citadel are widely adopted by attacker...

Aug 20, 2015

By Brandon Levene, Robert Falcone, Josh Grunzweig, Bryan Lee and Ryan Olson

Malware, Unit 42

What’s Next in Malware After Kuluoz?

Regular readers of this blog have heard all about the infamous Kuluoz malware. This family was the latest evolution of the Asprox malware and at its peak in 2014 it accounted for 80% of all malware sessions we observed in WildFire. When the team published our Threat Lan...

Aug 10, 2015

By Ryan Olson

Malware, Threat Prevention, Unit 42

UPS: Observations on CVE-2015-3113, Prior Zero-Days and the Pirpi Payload

A June 23 FireEye blog post titled “Operation Clandestine Wolf” discussed a cyber espionage group, known as APT3, that had been exploiting a zero-day...

Jul 27, 2015

By Robert Falcone and Richard Wartell

Fuel User Group

Fuel User Group Chapters Connect Palo Alto Networks Users Locally

In cities and regions around the globe, Palo Alto Networks users are connecting in Fuel User Group’s 105 chapters and taking advantage of in-person and online forums to share their...

Jul 17, 2015

By Megan Scofield

Cybersecurity, Malware, Threat Prevention, Unit 42

Tracking MiniDionis: CozyCar’s New Ride Is Related to Seaduke

Unit 42 has uncovered a new campaign from the CozyDuke threat actors, aka CozyCar [1], leveraging malware that appears to be related to the Seaduke ma...

Jul 14, 2015

By Brandon Levene, Robert Falcone and Richard Wartell

Events, News of the Week

Palo Alto Networks News of the Week – July 11

Here is all of the top Palo Alto Networks news from this past week.

Jul 11, 2015

By Chad Berndtson

Malware, Threat Prevention, Unit 42

APT Group UPS Targets US Government with Hacking Team Flash Exploit

On July 8, 2015, Unit 42 used the AutoFocus Threat Intelligence service to locate and investigate activity consistent with a spear-phishing attack tar...

Jul 10, 2015

By Bryan Lee and Robert Falcone

Malware, Threat Prevention, Unit 42

New Android Malware Family Evades Antivirus Detection by Using Popular Ad L...

NOTICE: We have updated this blog to clarify that Airpush is not responsible for Gunpoder. Airpush's platform was abused by the malware author to hide...

Jul 07, 2015

By Cong Zheng and Zhi Xu

Cybersecurity, Security Platform

These Are the Necessary Conversations on Cybersecurity

Everyone who has experienced a breach has had to have an "uncomfortable talk" with their employees or customers at some point. Telling people who know and trust your brand that they are at heightened risk is ne...

Jul 06, 2015

By Davis Hake

Announcement, Security Platform, Threat Prevention

Better Threat Intelligence and Information Sharing Among Global Retailers

The increasing volume and sophistication of cyber threats means all organizations must evolve their security posture. This is especially important in...

Jun 30, 2015

By Chad Berndtson

Customer Spotlight, Events, News of the Week

Palo Alto Networks News of the Week – June 27

Here is all of the top Palo Alto Networks news from this past week.

Jun 27, 2015

By Chad Berndtson

Cybersecurity, Threat Prevention

Preview AutoFocus Through Our Community Access Program

Security teams don't lack for threat intelligence data, but the sheer volume of that data — and the alerts it creates — makes it virtually impossible to quickly identify and respond to advanced, targeted threat...

Jun 25, 2015

By Chad Berndtson

Ignite

Lee Klarich at Ignite 2015: We’re Preventing Advanced Attacks, Not Just Det...

At this year’s Ignite conference, Lee Klarich, SVP of Product Management at Palo Alto Networks, shared the latest on the company's products, including a live demonstration of the n...

Jun 24, 2015

By Brittany Stagnaro

Malware, Threat Prevention