Dark Web Monitoring
The Dark Web has become the place where cybercriminals trade stolen data records such as user credentials, personal information, credit/debit cards, and more. These data records are often listed in various hidden resources and hacker groups or forums that are generally not easily available to the general Internet public.
Pentest People have released an innovative Dark Web Monitoring Service as a way to offer customers peace of mind that any mention of their brand, domain name, or specific data assets have not been compromised in a data breach and are not available on the Dark Web.
The Dark Web Monitoring Service leverages proprietary scanning tools that have been custom written by the experienced team of security researchers at Pentest People. These tools harness various manual search mechanisms and APIs that have been created from doing numerous Open Source Intelligence (OSINT) assignments. The service can be delivered purely as an alerting engine, alerting you when references to your data assets or found, or more as a managed service where an experienced member of the team manually verifies every finding and produces a risk report with a full remediating action plan.
If you are not proactively scanning the Dark Web for references to your brand and data assets then you are leaving yourself open to the ramifications of a serious data breach without your knowledge.
What Are The Risks?
Most Data Breaches are performed for financial gain. The cybercriminals exploit a vulnerability that results in a data breach and then extract the data. This data then has to be sold and the Dark Web, with its various underground forums and user groups is the place where the majority of this data is advertised.
It is quite common that the first a company knows about a data breach is when its data is identified for sale via the Dark Web. The attacker may have infiltrated the network and extracted the data without the company knowing and it is only when this data is listed for sale that the breach is identified, posthumously.
It is therefore imperative that you proactively scan the regular and Dark Web to add this scanning into your defence in depth strategy for risk management.
How Can We Help?
Pentest People’s Dark Web Monitoring Service was designed to identify when a customers data is breached and posted to locations on the regular or dark web.
Unless you are performing this level of pro-active monitoring you are unaware of what data assets have been compromised and are publicly available on various dark web data sources.
By using the service you can identify if any issues arise and then take action to remediate against the issues identified.
The service would be delivered as part of the Pentest People Penetration Testing as a Service (PTaaS) and full access to the SecurePortal and other complementary tools would be provided.