Dragos Threat Intelligence - OSINT Primer at RSAC Security Conference
Summary: Dragos Director of Intelligence Analysis Amy Bejtlich and Cyber Threat Intelligence Analyst Selena Larson presented an OSINT primer at RSAC in San Francisco on 26 February 2020, describing the types of public information an adversary may target to develop an attack against an ICS-related entity. The examples included 10-K financial data on a security devices manufacturer, system documentation for a New York-based utility, power plant details from a vendor website, pharmaceutical company software and production device details, a third-party database of sensitive RFP submission data, and Energy Information Administration open source government data.
Key Takeaway: The case studies included an activity group that targeted a western energy company and obtained information about generation and engineering, and adversaries running LinkedIn phishing campaigns against oil and gas and mining employees - all built from legally collected, publicly available material.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026