Mandiant intelligence integrates with Google Chronicle SIEM and Google Cloud Security Command Center to give threat context for cloud environment findings. Google keeps the Mandiant brand for enterprise sales to protect its reputation in the security community. Integration between the companies takes 2 to 4 years to reach deep technical coherence, creating a delay for immediate benefits. Google Cloud uses Mandiant expertise in incident response, strategic readiness, and technical assurance to help organizations mitigate threats. You know the basics of the $5.4 billion acquisition, so watch how the tools work together. Google Cloud uses a shared fate model to help organizations find and validate security issues before they become incidents. A Mandiant team of security and intelligence individuals in 22 countries compiles the intelligence used by customers in 80 countries. The acquisition involved an all-cash transaction for $23.00 per share, which represented a 57 percent premium over the 10-day trailing volume weighted average price as of February 7, 2022. Mandiant intelligence helps organizations manage and configure complex security products while Google Cloud provides a central point of intelligence across on-premise and multicloud environments globally.
The current threat landscape includes the Chinese company i-Soon, which generates tens of millions of dollars in revenue by working for the PRC Ministry of Public Security. This company charges the MSS and MPS between $10,000 and $75,000 for each successfully exploited email inbox. i-Soon also trains MPS employees how to hack independently and sells various hacking methods to customers. These actors target religious organizations, news organizations in the United States, and foreign ministries in Asia. The Justice Department also exposed APT27 actors, including Yin Kecheng and Zhou Shuai, who target groups like the New York State Assembly and news organizations in Hong Kong. The State Department has a reward of up to $2 million for information leading to the arrests and convictions of Yin Kecheng and Zhou Shuai. North Korean actors known as Andariel use Maui ransomware to target US hospitals and health care providers. These attacks prevent providers from giving timely care to patients. Mandiant publishes research on Andariel tactics to help practitioners prevent and mitigate attacks. Microsoft works with the Justice Department to implement technical measures that block Andariel actors from accessing networks. The State Department has a reward of up to $10 million for information leading to the identification or location of Rim Jong Hyok. Rim and his co-conspirators also target US Air Force bases, NASA-OIG, and defense contractors in Taiwan, South Korea, and China. The FBI and DOJ seized $114,000 in virtual currency, following a $500,000 seizure.
Google Cloud works toward an "autonomic state of existence" where threat management functions scale as customer needs change. This vision uses AI and machine learning to analyze security data. Google uses sub-second search to help customers defend organizations. Mandiant delivers expertise and intelligence at scale via the Mandiant Advantage SaaS platform. This platform helps organizations manage and configure their mix of security products. Mandiant intelligence identifies threats across cloud and on-premise environments. The combination of Google Cloud and Mandiant supports collaboration and augments threat research capabilities. Will the convergence of AI agents and Mandiant intelligence eliminate the need for human threat hunters? Mandiant provides technical assurance to help organizations reduce business risk before, during, and after an incident through its expertise. Mandiant helps security teams through their security transformation across cloud and on-premise environments. The security operations suite provides a central point of intelligence, analysis, and operations across on-premise, Google Cloud, and other cloud providers. Mandiant expertise helps customers manage security throughout the entire security lifecycle. Mandiant detects, investigates, and responds to cyber threats.
