Cyber Threat Intelligence

Stay ahead of potential threats. Collect and analyse information about threats and vulnerabilities in real-time.

Drive decisions with confidence

Make informed cybersecurity decisions with reports that go beyond technical indicators to include strategic analysis aimed at senior stakeholders. Grounded in continuous first-hand insight into the global threat landscape, and analysis of extensive proprietary and commercial sources, we provide you industry-leading threat intelligence.

Gain unparalleled, timely visibility

Inform your security organisation on a broad range of potential attacks, including new and innovative techniques directly observed by PwC. Our Global Threat Intelligence team currently tracks and systematically analyses more than 400 threat actors from around 27 different countries.

Enrich your cyber defences

Enhance your own security investigations and threat hunting tactics. PwC divides the threat landscape according to the motivation of those behind cyberattacks, from espionage groups intent on conducting large scale intelligence-focused collection operations to hacktivist groups looking to disrupt an organisation’s operations for what they believe is a just cause.

What is Threat Intelligence?

Threat intelligence, also known as cyber threat intelligence, refers to the process of collecting, analysing, and disseminating information about cyber threats and vulnerabilities. It is a proactive approach to security that involves continuously monitoring for threats, analysing the potential impact of those threats, and taking action to mitigate them.

Information sharing plays a crucial role in effective threat intelligence. In today's interconnected world, it is important for organisations to share information about threats with one another in order to better understand the broader cyber threat landscape. This can be done through a variety of channels as mentioned earlier on, typically facilitated through specialised open-source or proprietary threat intelligence sharing platforms.

Key Benefits

One can summarise the key benefits to consuming threat intelligence as follows:

First, it helps organisations stay ahead of potential threats by providing them with advance warning of potential attacks. This allows organisations to take proactive measures to protect themselves, rather than simply reacting to attacks after they have occurred.

Threat intelligence helps organisations prioritise their cyber security efforts by providing them with insight into the most pressing threats facing their industry or region. This can help organisations allocate their resources more effectively, ensuring that they are able to address the most pressing threats first.

In addition to helping organisations protect themselves from cyber threats, threat intelligence can also be used to support law enforcement and national security efforts. By sharing information about threats and vulnerabilities with relevant authorities, organisations can help to disrupt and prevent cyber attacks before they occur.

Explore our services and solutions

Threat intelligence subscription

Get timely, tactical, and strategic data on the global threat landscape so that you can make more informed, risk-based decisions.

Threat intelligence reporting
Threat intelligence data
Threat intelligence portal
Threat context

Threat intelligence reporting

Stay ahead of the game with technical reports on new targeted attack campaigns, as well as strategic reporting on a particular region, sector, or actor of interest to your organisation.

Threat intelligence data

Monitor ongoing threats with a high-confidence feed of single value indicators associated with targeted attacks. Access network IDS and file detection signatures. Contextualise relationships between indicators and threat actors. Formats supported include network detection (via Suricata or Snort) and end point detection content (via SIGMA or Yara).

Threat intelligence portal

Use this site as a resource to access the most relevant threat research to your organisation, including our reporting, technical data, and threat actor information. Query threat data, including indicators of compromise, and tailor feeds to your areas of interest.

Threat context

Access a private collaboration space, with direct access to our analysts, providing broader context around the threats you’re investigating. People and technology work hand in hand to deliver faster, more intelligent and better outcomes.

Digital Risk Monitoring and Intelligence Service

Proactive monitoring bolstered by specialised knowledge and expertise. Our experience from hundreds of incident response engagements involving the organised crime ecosystem suggests that access to one set of data alone, such as deep and dark web (DDW), does not enable most organisations to address their most pressing concerns. PwC’s solution is to combine access to relevant information with tailored context, and further access to SMEs.

Deep and dark web monitoring
Brand abuse
Domain takedown support
RFI support and analyst interaction

Deep and dark web monitoring

Through our in-depth knowledge of the deep and dark web (DDW), we will research chatter related to your organisation and brand on criminal forums and marketplaces, while also looking for any credential leaks, intellectual property leaks, and ransomware-related artefacts.

Brand abuse

Our monitoring of brand abuse will keep you abreast of targeted campaigns against your organisation's brand through several social media and instant communication platforms as well as on the traditional web, promptly alerting you when such situations arise.

Domain takedown support

As an optional component, we can assist you in removing or shutting down external external websites, domains, or services that are serving malicious content, such as phishing sites, typosquatting domains, social media pages, and other brand-impersonating landing pages.

RFI support and analyst interaction

Request for information (RFI) from our threat intelligence and crime analysts to support you with specific queries or situations. Our output can be provided to you in various forms, including reports, Maltego graphs, briefings, etc.

High-touch service providing tailored, contextualised insight into your organisation's digital footprint.

Directed research and assessments

Empower your teams with bespoke reports and personalised support from our analysts on the specific threat actors, campaigns, malware, and malicious indicators of most interest to your organisation.

Consulting services

Enhance your ability to consume, apply or produce intelligence with a maturity assessment, threat intelligence programme development, and threat modelling. We deliver quality through integrity, unwavering objectivity, and heavy investment in data, tools, tech, products and services.

In summary

Threat intelligence is considered a valuable tool for helping organisations identify, prevent, and mitigate potential cyber-attacks. By collecting and analysing information about threats and vulnerabilities in real-time, organisations can stay ahead of potential threats, allocate their resources more effectively, and ensure that they are in compliance with all relevant laws and regulations.