UpSight Security Inc.

We at UpSight Security Inc. are excited to welcome the talented team at DreamIt ventures on board as our newest investor! A big thank you to Mehlam Shakir, Drew Hunt and Evelin Biro for sharing our vision to redefine #ransomware resilience! We're excited for what's ahead!

We are thrilled to welcome our new partners Mehlam Shakir and Dreamit Ventures joined by Ken Levine to change how we 'do endpoint' with AI and end ransomware! Mel does a great job explaining the time to detect and respond gap that the ransomware extortion industry exploits with widespread massive financial impacts. UpSight.ai detects and responds in real time using a purpose build AI that natively understands the language of the attacker: MITRE ATT&CK. Closing the response gap requires far more than canned response scripts or behavior blocking rules, it requires the deep understanding of UpSight.ai attacker eviction.

We are thrilled to welcome our new partners Mehlam Shakir and Dreamit Ventures joined by Ken Levine to change how we 'do endpoint' with AI and end ransomware! Mel does a great job explaining the time to detect and respond gap that the ransomware extortion industry exploits with widespread massive financial impacts. UpSight.ai detects and responds in real time using a purpose build AI that natively understands the language of the attacker: MITRE ATT&CK. Closing the response gap requires far more than canned response scripts or behavior blocking rules, it requires the deep understanding of UpSight.ai attacker eviction.

Outsourcing is everywhere. The Akira ransomware is a 'Ransomware as a Service' (RaaS), which offers encryption "payloads" to extortionists in exchange for a cut of the extortion profits. The most technically interesting think about Akira is that it uses a public/private keypair for encryption, meaning that the key for encryption is different from the key for decryption and the decryption key is not present on the machine being encrypted. Using public/private cryptography in this manner is a significant barrier to incident responders being able to decrypt impacted data using forensic evidence after the fact. UpSight.ai detects and stops Akira proactively. You can explore Akira and other ransomware actors that we have curated in our 'UpSight Insights' within the upsight console dashboard. Just register for a free account below. https://lnkd.in/gft9SB4b

The U.S. Department of Health and Human Services (HHS) office of Information Security put out a report on the Trinity ransomware actor recently (https://lnkd.in/g3bSAUxi). Trinity employs the 'double extortion' business model by exfiltrating data before encrypting it. At UpSight.ai we recently got ahold of a Trinity sample... and yes, UpSight.ai detects and evicts the encryptor. The encryptor isn't particularly interesting behaviorally, but I'd like to call out that UpSight.ai can now identify when a file is dropped into an environment over RDP in the below graph. If anybody has details, they would be willing to share about the exfiltration activity observed by this actor, we would love to learn more. https://lnkd.in/gS5jYMYF

About a month ago a new info-stealer malware called Flare Stealer came to our attention. Since Virus Total had no (as in zero) hits on it, we obtained and ran the sample in our UpScan Lab. Sure enough it was a stealer and sure enough our predictive small language model detected and the UpSight client terminated it. We did not have to update signatures and/or the model parameters, simply because behaviors are hard to change and obfuscate. The analysis of this malware was as simple as upload it to UpScan, run it and then observe the results (see the snapshot below). Do you have a malware sample and you want to learn about its behavior and what TTPs it is using? UpScan is _still_ (not for long) free - just signup at upsight.ai and upload the sample. We will do the heavy lifting for you and analyze it! Oh BTW - Virus Total still does not report any detections against this sample.

Network scale ransomware incidents nearly always start with a single compromised system. UpSight.ai gives powerful resilience against the full ransomware attack chain!

Excited for BlackHat Day 2! Stop by booth SC-208. Also make sure you listen to our talk in Start-Up City from 10:20-10:40AM today.

Day 1 at #BlackHat was wild at the UpSight booth. Time to decompress and get ready for round two.

We are so excited about the interest we are getting at #BlackHat. Come to SC-208 to learn more about UpSight Security!