With Multi-Vector Attacks, Quality Threat Intelligence Matters

Cisco describes a multi-vector attack example called the "String of Paerls" in which spear-phishing emails with malicious Word macros dropped executables that contacted multiple command-and-control domains and cloud-hosted storage; the post emphasizes the need for broad visibility, correlation of diverse telemetry (spam, web, advanced malware detection), big-data analytics to cluster and triage artifacts, and automated containment to reduce compromise-to-discovery time.