Organisation
organisation:fireeye
Security firm hired by VTech to assist with incident response and resolve security issues.
Security firm hired by VTech to assist with incident response and resolve security issues.
“VTech hired a security firm called FireEye to help with incident response”
Cybersecurity company that investigated the incident, analyzed the malware, and published reporting about it.
“FireEye was called down to clean up and investigate this problem.”
“FireEye ended up going forward and deciding to publish this late December.”
Threat-intelligence company that investigated WannaCry and developed detection and blocking for clients.
“FireEye is a threat intelligence company.”
Security company where analyst Michael Matonis investigated Olympic Destroyer’s delivery mechanism and related phishing documents.
“an analyst named Michael Matonis, who worked for FireEye”
Security company credited in the episode with calling the activity group Molerats and publishing reports about it.
“FireEye calls this group Molerats”
Security company identified as having acquired Mandiant.
“Recently, they were acquired by FireEye.”
Company identified as the organization that had not yet acquired Mandiant at the time discussed.
“Mandiant, which wasn’t owned by FireEye yet”
Security company involved in analysis and disruption of Cutwail and Rustock.
“In early 2010, FireEye managed to get ahold of a handful of Cutwail’s C&C servers and knocked them out.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | DISCOVERED_BY | VTech Kids’ Toy Hacking case | Explicit | 2 |
| incoming | DISCOVERED_BY | Triton | Explicit | 68 |
| incoming | ASSOCIATED_WITH | Mandiant | Explicit | 91 |
VTech Kids’ Toy Hacking case DISCOVERED_BY FireEye
FireEye was hired for incident response and found and resolved security issues after the breach.
Explicit Confidence 99% · Jack Rhysider EP 2 Details
“VTech hired a security firm called FireEye to help with incident response. FireEye was able to find the security issues and resolve them.”
FireEye investigated the incident, analyzed the malware, and named it Triton.
Explicit Confidence 99% · Jack Rhysider EP 68 Details
“As the team at FireEye investigated this, they decided to give it a name. Since the file was called trilog.exe and this was targeting the Triconex systems, they called the malware Triton.”
Mandiant ASSOCIATED_WITH FireEye
Mandiant was acquired by FireEye.
Explicit Confidence 99% · Jack Rhysider EP 91 Details
“Recently, they were acquired by FireEye.”