Latest News
PRE-ATT&CK Techniques: The Key to Preventing Cyber Attacks
Reading Time: 4 minutes
Cyber attackers are now targeting any kind of information that can reward them: from personal data to corporate information to government secrets. However, behind each attack, there is a long chain of thoroughly selected actions.
While most organizations focus their attention on protecting the perimeter of their corporate network, the cybersecurity experts from MITRE advise expanding their ability to understand the behavior of adversaries.
Hackers select their victims long before their attack and carefully collect information about them before executing any malicious actions. Nowadays, the internet provides them with a great variety of data about almost any company, so adversaries can learn enough not only about a company’s activity but also about its cybersecurity weak spots.
To help security officers understand how hackers choose their victims and prevent an attack before it even begins, MITRE, a non-profit corporation that tackles cybersecurity problems, has created the PRE-ATT&CK matrix that is a part of the Adversarial Tactics, Techniques, and Common Knowledge, also known as the ATT&CK framework.
What is the PRE-ATT&CK matrix?
PRE-ATT&CK allows security officers to prevent a possible attack before an adversary penetrates into their network. The PRE-ATT&CK matrix contains 15 tactics and more than 150 techniques that explain the adversary planning, information gathering, reconnaissance, and setup when preparing their attack.
The tactics in PRE-ATT&CK explain the typical adversarial techniques and procedures for selecting a victim, obtaining information about it, and launching the cyber attack. This information provides security officers with a broader understanding of adversary behavior before any indicators of compromise appear.
PRE-ATT&CK allows security officers to find answers on the following questions:
- Are there any signs that cyber attackers are targeting your organization?
- What adversary techniques may an attacker apply to your company?
- How can you analyze the collected data to notice a hacker’s interest into your organisation?
Analyzing the PRE-ATT&CK techniques and tactics, defenders can get a better understanding of cyber attacker activities. They can use this knowledge to make appropriate decisions on what technical measures and mitigations to adopt in order to reduce hacker’s chances on properly preparing an attack on their organization.
How to use the PRE-ATT&CK matrix
The PRE-ATT&CK matrix provides detailed information about how adversaries prepare for arranging a cyber attack. The PRE-ATT&CK tactics explain what goals an aversary sets for themselves, while each technique shows how these goals can be achieved. The tactics in PRE ATT&CK reflect such attacker goals:
- Priority definition
- Victim selection
- Gathering information about a victim
- Victim weakness identification
- Persona development
- Capabilities setup
The PRE-ATT&CK techniques show how adversaries perform each tactic and allow enterprise defenders to track and organize attack statistics and patterns.
Priority definition
Using this tactic, an adversary weighs all the pros and cons of arranging an attack. They set their goals by considering how the information they are getting can benefit them and what kind of information has the biggest value for them. At this stage, cyber criminals compare the cost of cyber intrusions with the expected reward from their activity.
Victim selection
Taking into account their priorities, adversaries begin to look for their victims. They take their strategic considerations and then narrow them down tactically and operationally until a victim is selected. Depending on their target, adversaries can decide to attack it directly or through business partners. However, for making the right decision, hackers usually need to collect all possible information about their target.
Gathering information about the victim
After adversaries select their victim, they can’t blindly execute an attack. They first need to gather all information about their target: the type of technical system the victim uses, the personnel that works for the victim, and the victim organization itself.
Attackers usually collect information about their victims by using open-source intelligence tools and techniques. Such data about a victim as organization’s domains, email address format, names of top personnel can be freely found online by combining phishing and social engineering techniques.
While organizations can’t minimize their presence on the internet nowadays, security officers can consider how the public data of their company may be abused and define vectors of possible attacks.
Identifying victim weaknesses
By analyzing all the data collected at the previous stage, adversaries can find potential weaknesses of their victim. The discovered vulnerabilities become the basis of creating a plan of the attack. Weakness identification also allows adversaries to test and configure their own systems for attack execution.
At this stage, defenders can consider the Pyramid of Pain that will help them define the importance of indicators of compromise.
Persona development
Though the internet is a place where you can find everyone, it’s also a place where anyone can create a fake persona. A hacker can develop their persona by providing a fake email address and personal information to one of the social media sites. Getting in contact with a potential victim, an adversary can gain greater access to the victim’s personal profile with an intention to abuse this data later.
Unfortunately, most social media don’t inform their users whether someone viewed their profile. However, organizations can establish tight privacy control for their corporate accounts in social media by establishing trusted connections, blocking suspicious content, and educating their employees.
Capabilities setup
After getting in contact with potential victims, an adversary will establish capabilities for arranging an attack. Though some cyberc riminals may be really technology-savvy, most of them look for the easiest way to maintain their own internet infrastructure.
There are plenty of cost-effective ways to anonymously use servers, autonomous systems, and networks. Adversaries often abuse this anonymity for achieving their malicious goals. Paying just several dollars per month, they can get a virtual presence enough for compromising your organization.
Even if your logs detected adversarial activity from a specific server, it would be very difficult to legally pursue that source because of the lack of evidence. Though it may seem nearly impossible to detect an adversary at this stage of the cyber attack, security teams should pay attention to behavioral patterns that indicate hacker’s activity.
While PRE-ATT&CK describes only the adversarial behavior before an attack, MITRE has recently integrated some PRE-ATT&CK techniques into ATT&CK to let security teams define the potential vectors of attacks on their organizations and improve their security measures accordingly.
Enterprises that integrate PRE-ATT&CK into their security best practices can significantly enhance their protection measures and prevent adversaries long before they actually begin their malicious campaigns.
Conclusion
It’s not a secret that cyber attacks are now more targeted than any time before. Cyber criminals carefully select their next victim and conduct a thorough investigation before penetrating into your corporate network. Using the PRE-ATT&CK matrix from MITRE, security teams can reveal the early signs of adversarial behavior and prevent an attack before hackers compromise your organization.
This article is a contribution from Marcell Gogan. Marcell is a specialist within digital security solutions, business design and development, virtualization and cloud computing, R&D projects, establishment and management of software research direction – working with Ekran System. He also loves writing about data management and cybersecurity.
Source: Latest News on European Gaming Media Network
This is a Syndicated News piece. Photo credits or photo sources can be found on the source article: PRE-ATT&CK Techniques: The Key to Preventing Cyber Attacks
Latest News
Meridianbet Expands B2B Operations into Nigeria, Entering a Regulated $2 Billion Betting Market
Meridianbet, a subsidiary of Golden Matrix Group, Inc., has officially launched its B2B operations in Nigeria, one of the largest and fastest-growing betting markets in Africa. The company’s entry into Nigeria further strengthens its 20-year presence in Africa, leveraging its proven track record in regulated markets to deliver world-class gaming products.
Through its newly licensed local entity, Masterlive Network Limited, Meridianbet has secured full regulatory approval from the Lagos State Lotteries and Gaming Authority (LSLGA), allowing it to operate in both sports betting and online casino verticals under License No: LSLGA/OP/OSB/MB041124.
The official launch of Meridianbet.ng marks a strategic expansion into a market worth over $2 billion, according to the research of Orange Business Intelligence Technology, with over 60 million Nigerians actively participate in betting, contributing to one of the fastest-growing industries on the continent.
Zoran Milosevic, CEO of Meridianbet, commented: “Our expansion into Nigeria marks a significant step in our long-term strategy to deepen our presence in Africa’s most dynamic gaming markets. With a highly engaged player base and strong industry growth, Nigeria presents a major opportunity for our B2B model. We are committed to bringing our cutting-edge technology, AI-powered betting solutions, and localized expertise to drive long-term success for our partners in the region.”
FY 2024 Revenue Growth & Investor Outlook
Golden Matrix Group has provided a preliminary full-year 2024 revenue estimate of $150 million, reflecting the company’s continued growth trajectory. The Group expects to release its audited FY 2024 financial results in the coming days, offering investors a comprehensive performance overview. The Nigerian market represents a strategic opportunity for future revenue expansion, aligning with GMGI’s global strategy to strengthen its presence in high-growth gaming markets.
Key Market Potential & Strategic Expansion
According to the Orange Business Intelligence Technology (ORBIT), Nigeria’s betting industry surpassed $2 billion back in 2020, with projections indicating up to $4.7 billion in annual revenue potential over the next decade. Football remains the primary driver of market growth, with a vast customer base engaging both online and offline. Meridianbet’s B2B model will provide advanced technology solutions, gaming content, and platform services to local operators, offering a scalable and highly adaptable system tailored to the Nigerian market.
A Strategic Milestone in Meridianbet’s African Growth
With operations in 18 markets across Europe, Africa, and Latin America, Meridianbet has built a reputation as a leading technology provider and betting operator. The company’s expansion into Nigeria follows its long-standing success in established African markets, where it has been a dominant player for over two decades.
The soft launch of Meridianbet.ng is already delivering positive early results, with strong partner satisfaction and excellent customer feedback.
AI-Powered Innovation & Market Expansion
As part of this rollout, Meridianbet is introducing its proprietary AI Sports Betting Recommender and AI Casino Recommender, delivering personalized betting experiences based on real-time data, player behavior, and predictive analytics. These innovations, already proving successful in multiple markets, will enhance customer engagement, retention, and overall user satisfaction in Nigeria’s rapidly evolving gaming landscape.
The post Meridianbet Expands B2B Operations into Nigeria, Entering a Regulated $2 Billion Betting Market appeared first on European Gaming Industry News.
Here are this weeks latest slots releases compiled by European Gaming
PG Soft has launched its swashbuckling new 3-reel, 3-row video slot, Mr Treasure’s Fortune. PG Soft’s perilous high-seas expedition blends the nostalgia of classic arcade machines with modern gameplay as players search for the legendary Black Fang Pirates’ hidden fortune.
ELA Games presents its newest development, Noble Crown. This title, with its high-quality graphics, enticing animations and contribution to a balanced portfolio, is a testament to the studio’s design and development philosophy. This 5×3 slot includes iconic symbols commonly seen in classic pub games, such as crowns, diamonds and lucky sevens.
Evoplay has launched Emerald Brewer, a festive slot that captures the spirit of St. Patrick’s Day with vibrant visuals, rewarding features, and a taste of Irish luck. Played on a 5×4 reel layout, the game introduces Wild symbols, which substitute for all regular symbols except Green Pot, Coin, and Bonus symbols.
Swintt, is helping players satisfy their cravings for sugar, spice and all things nice in Candyman – a sweet new Premium release where tumbling reels and multiplier free spins pave the way to candy-coated wins of up to 5,000x. Played out across an expanded 6×5 reel matrix, Candyman does away with conventional lines in favour of a scatter mechanic were collecting eight or more matching symbols guarantees a prize regardless of where they land, with new icons falling from above to potentially create further wins.
Make Slots Great Again! Nolimit City breaks the norm once more in its latest release Home of the Brave. A slot that isn’t afraid to take a jab! No agendas here, just a whole lot of chaotic fun, spicy mechanics and unpredictable gameplay. Unlike typical slots, which are composed of a couple of rows and reels, Home of the Brave includes a Conveyor Belt positioned above the top row and 2 Hot Sauce Reels on either side of the reel area.
Thunderkick has released The Golden Pot & Pints, the latest introduction to its diverse festive-themed portfolio centred around the iconic Irish holiday, St. Patrick’s Day. Set in an Irish tavern, four lucky leprechauns reside on the reels of this 7×7 cluster pays slot, accompanied by tankards, top hats, and shamrocks.
Amusnet has unveiled the latest addition to its Live Casino portfolio, Extra Crown Deluxe Live. The company’s first-ever live slot game seamlessly blends tradition and innovation into an exciting mix of standard slot games and live-streamed action available 24/7.
Million Games is thrilled to announce the launch of Vault Rush, the latest high-volatility online slot developed in collaboration with YUGO Workshop under the Million Stars partner program. This 5×3 reel slot pays homage to the golden era of classic slots, featuring familiar symbols like 7s, Bars, bells, and fruits.
Play’n GO introduces Trinity Impact, a vibrant new slot that combines adventure, magic, and teamwork in a quest to save the mystical realm of Lumina. Immerse yourself in the enchanting world of Trinity Impact, where players join three friends on a heroic journey to protect Lumina, a land of magical wonders and ancient Crystal relics.
Push Gaming has launched the sequel to its 2024 Arctic-themed hit with the release of Big Bite Push Ways. The title will debut the provider’s new mechanic, Push Ways. This mechanic features nudging Hot Zones, which splits any symbol within the overlay into two. This increases the number of available ways to 262,144 and drives engagement.
Amusnet has released a new game for those who enjoy classic slot games with a dice twist. The latest addition to the company’s Online Casino, 100 Golden Coins Dice Edition, comes to life in March to provide a fun gaming experience to all dice lovers. This 5-reel, 100-fixed-payline game combines the classic slot game and dice symbols in entertaining gameplay.
Players can expect a fresh and juicy take on the classic slot experience in the latest title from ICONIC21. Iconic Fruits: Hold and Win sees classic appeal meet modern excitement across a three-by-three gameboard with five paylines active. A feeling of nostalgia will be felt as the reels spin and Fruit and Coin symbols land – this includes Cherries, Lemons, Pineapples, Strawberries and Watermelons.
Blueprint Gaming™ has upped the ante in its latest instalment to the iconic Cash Strike™ series. With the eye-catching win boost feature offering electric collect wins boosted by multipliers, Cash Strike Win Boost increases the player’s chances of returns up to a striking 50,000x. A familiar feast of classic fruit symbols adorns the 3×3, 125 ways to win slot alongside an array of blazing golden coins, heightening the excitement with enlarged opportunities for wins during base play.
Playson, the renowned digital entertainment supplier, is taking casino gameplay into an electric new dimension in its latest release, Charge the Clovers: Hit the Bonus™, as bonus play leads with unique Super Charge and Multi features. Golden clovers, making a welcome return to the 3×3 grid, take the form of bonus symbols alongside boost icons, featuring swirling blue tornados which radiate vibrant energy and boost the chance of eye-catching payouts for players.
Every fisherman has a story to tell. Booming Games brings these stories to life with the brand-new Fish Tales games series! The first game tells a story of a mythical bass, so large it can fit the entire reel! See if this is just a myth or indeed, there is such a creature roaming the deep and reel yourself in some monster wins! Fish Tales Monster Bass is a 5×3, 20-line slot with a boatload of features. Start to net wins with the Fishin’ Time cash collection.
The post Week 11/2025 slot games releases appeared first on European Gaming Industry News.
ELA Games, a supplier of innovative games in the iGaming industry, has partnered with RoyalCasino to enter the Danish market.
Royal Casino is Denmark’s only land-based and online casino with over 33 years of experience in the gambling industry. The Danish RoyalCasino Group operates the land-based casino in their top-rated Hotel Royal, offering Danish players an elevated gaming experience.
ELA Games’ collaboration with the prestigious Danish brand marks a significant milestone for the development studio, as they are entering the Danish market. As a result, ELA Games’ innovative content, such as hallmark titles like Cash of Gods, It’s Shark Time and Lucky Dwarfs, will be hosted on the RoyalCasino.dk platform.
David Fall, ELA Games’ Business Development Manager, commented on the partnership, “RoyalCasino is an illustrious figure in the Danish gaming scene, and we’re excited to partner with them to provide our content on their platform. RoyalCasino.dk, despite its pedigree, is a rapidly growing brand. With the various promotions prepared in tandem with this announcement, ELA Games looks forward to expanding in Denmark.”
Jonas Madsen, RoyalCasino’s Director of Retention Marketing, added, “We’re very excited about the addition of ELA Games to our portfolio of games at RoyalCasino.dk. ELA Games is an up-and-coming game provider who, in just a few years, has managed to create captivating games with quality graphics, and we’re confident that their content will cater to the preferences of our growing database of players.”
The post ELA Games Enters the Danish Market Through New Strategic Collaboration With RoyalCasino appeared first on European Gaming Industry News.
-
Latest News3 months agoGamCare releases Annual Report following record breaking year of support on the National Gambling Helpline
-
Latest News3 months agoGovernment support, medals, and global recognition define a landmark year for Indian esports and video gaming in 2024
-
Latest News3 months agoKambi Group plc repurchase of shares during 18 December – 23 December 2024
-
Latest News3 months ago
India Levels Up: Emerging as a Global Gaming Powerhouse in 2024
-
Latest News3 months agoImagine Live Partners with King.rs
-
Latest News1 month agoSportradar’s Alpha Odds Receives Dual Honors at European iGaming Awards 2025
-
Latest News1 month ago
Fall in Love with Nature’s Greatest Romantics This Valentine’s Day at Springbok Casino and Claim 25 Free Spins
-
Latest News1 month agoSwintt secured ISO 27001: 2022 certification
You must be logged in to post a comment Login