Breaking: Microsoft and Crowdstrike Standardize Cyber Criminal Organization Names
In a groundbreaking move to enhance global cybersecurity efforts, Microsoft has unveiled a comprehensive term dictionary that aims to standardize the naming of cyber criminal organizations. This initiative, in collaboration with the global security company Crowdstrike, is designed to reduce confusion among security professionals and streamline the defense against cyber threats.
Addressing the Naming Chaos
Currently, the same hacking organization can be referred to by different names by various security companies. For instance, North Korea’s Kim Soo-ki, also known as APT43, Emerald Slit, and Velvet Cheonlima, has caused significant confusion. Similarly, the Russian hacking group Midnight Blizzard is also known as Koji Bear, APT29, and UNC2452. Microsoft aims to resolve this issue by categorizing cyber criminal organizations into five distinct groups.
Categorization for Clarity
Microsoft has classified cyber criminal organizations into the following categories to prevent naming confusion:
- National Infrastructure Threats: Cyber attackers linked to state programs or operating under state instructions.
- Monetary Motive: Attackers focused on financial gain.
- Private Sector Attackers: Cybercriminals targeting private entities.
- Influential Event Operations: Groups aiming to influence public perception or achieve specific interests through information dissemination.
- New Groups: Emerging groups that require further investigation.
Collaborative Efforts for Enhanced Security
Microsoft and Crowdstrike are now sharing their standardized naming conventions and associated data on their respective homepages. This collaborative effort includes Excel files detailing how both companies refer to the same cyber criminal organizations and summarizing the state affiliations of each group. This resource is freely accessible to anyone interested in enhancing their cybersecurity knowledge.
Looking Ahead
Microsoft has pledged continued participation in this collaborative effort, emphasizing that security is a collective responsibility. By standardizing the naming of cyber criminal organizations, Microsoft and Crowdstrike aim to improve defense measures and reduce the impact of cyber attacks, ransomware, and other malicious activities.
For more insights into cybersecurity trends and expert analysis, stay tuned to archyde.com – your go-to source for breaking news and evergreen insights in the tech and security landscape.