Enzoic Navigation
  • PRODUCTS & SOLUTIONS
    • PRODUCTS
      • Enzoic for Active Directory
      • Active Directory Lite
      • Breach Monitoring
    • SOLUTIONS
      • ATO Protection
      • NIST Password Compliance
    • INDUSTRIES
      • Hospitals & Healthcare
      • Government
      • Education
      • Financial Service
  • RESOURCES
    • CONTENT
      • Resource Hub
      • Blog
      • FAQ
      • Case Studies
      • Videos
    • DEVELOPERS
      • Support
      • Active Directory Tech Docs
  • COMPANY
    • OVERVIEW
      • About Us
      • Security
      • Threat Intel
      • Newsroom
      • Partners
      • Careers
      • Contact Us
  • PRICING
  • LOGIN
  • SIGN UP
  • PRODUCTS & SOLUTIONS
    • PRODUCTS
      • Enzoic for Active Directory
      • Active Directory Lite
      • Breach Monitoring
    • SOLUTIONS
      • ATO Protection
      • NIST Password Compliance
    • INDUSTRIES
      • Hospitals & Healthcare
      • Government
      • Education
      • Financial Service
  • RESOURCES
    • CONTENT
      • Resource Hub
      • Blog
      • FAQ
      • Case Studies
      • Videos
    • DEVELOPERS
      • Support
      • Active Directory Tech Docs
  • COMPANY
    • OVERVIEW
      • About Us
      • Security
      • Threat Intel
      • Newsroom
      • Partners
      • Careers
      • Contact Us
  • PRICING
  • LOGIN
  • SIGN UP
Threat Research

Enzoic’s Threat Research: From Extensive Knowledge to Decisive Action

At Enzoic, we understand the need for threat intelligence that allows both businesses and users to take action to keep themselves safe. Effective threat intelligence for compromised credential screening involves constant evolution, discerning reconnaissance, and real-time analysis and deployment. Unfortunately, most threat intelligence services are vague and laconic, relying on misleading statistics and alarmist reports as veneers for validity. Nearly everyone who has used an identity monitoring service has seen alerts like “Your email has been found on the Dark Web” or “Your Personal Information has been Compromised in a Data Breach”. If you’ve received one of these, what did you do next? Often, there’s no action you can take at all except perhaps staying alert. Many of these alerts are triggered by automated systems constantly rehashing the same data as it is traded between threat actors on forums, or uploaded to different file-sharing systems. Consequently, users suffer alert fatigue and the severity of the issue becomes a cause of complacency. 

Enzoic’s industry-leading threat research provides real-time, actionable data collected 24/7/365 by a comprehensive combination of human and automated research. Our threat research team constantly identifies new platforms, channels, and data exposures, often obtaining and processing data months before popular breach notification services. But collecting data is just the first step. To transform huge amounts of data into anti-ATO action, our threat research team uses proprietary systems to identify the highest-risk data (e.g. emails, passwords), extract it, and make it available so that affected users can be securely notified of exactly which credentials were breached. If these credentials are the same (or similar) as ones used for business accounts, administrators can implement automatic steps to lockout accounts or force password changes. So, if one of your employees’ credentials is picked up by our systems on a hacking forum or anonymous chat platform for instance, you will be able to protect your business from threat actors seeking to exploit this entry-point vector. 

While many ‘breach notification’ companies are indiscriminate about the data they collect, or focus only on large exposures, Enzoic’s broad reach is tuned to the most active threat sources, quickly filtering out repeat and irrelevant information. In addition to obtaining the large exposures, our research team identifies and monitors channels that threat actors use to share data for the express purpose of ATO, and constantly scans file-sharing services known to host newly posted account credentials. For example, sometimes passwords are shared as just a few lines in a chatroom; although this may not be a large ‘breach’, it only takes one compromised account to give a threat actor the foothold they need. Consequently, our systems are constantly scanning and parsing even the smallest communications for targeted threat data to deliver the most current and encompassing protection possible.  

An active defense requires specific threat knowledge, but also broad understanding and integration with the threat landscape. Among Enzoic’s many systems for threat intelligence are honeypots that allow us to monitor threat actor behavior in real-time and build an up-to-the-minute understanding of the exact behavior we can help our clients defeat. A honeypot is a computer system or network set up to appear vulnerable, attracting attacks from threat actors in ways that allow part of the attack to succeed, but not enough to compromise the system. Meanwhile, monitoring software runs in the background and “watches” the attack, collecting information on the hacker, such as IP address, attack vectors, and credentials they use to attempt access. By cross-referencing the compromised data we collect with the statistics from honeypots, we can better understand the full threat landscape and provide deeper insights for both our research team and our clients. 

Enzoic’s tools for cybersecurity professionals provide secure, real-time solutions for protecting your network against compromised credentials. Our plugins and API provide NIST-compliant protection and decrease user friction compared to prevalent (but ineffective) methods like mandated regular password changes. As a business, protecting your network starts with your employees, and Enzoic’s cutting-edge, specialized research and software are a crucial part of the strong security posture that a business must establish in today’s world. 

By: Dylan Hudson

account takeover protectionCompromised Credentialscybersecurity solutionexposed passwordshoneypotsthreat intelligence

Search

Assess your cyber vulnerabilities with a free password audit tool
Start Now

Browse blog categories

  • Account Takeover (28)
  • Active Directory (44)
  • all posts (153)
  • Continuous Password Protection (24)
  • COVID-19 (7)
  • Cracking Dictionaries (6)
  • Credential Screening (21)
  • Cybersecurity (66)
  • Data Breaches (31)
  • EdTech (3)
  • Enzoic News (18)
  • Financial Services Cybersecurity (5)
  • GovTech (4)
  • Healthcare Cybersecurity (15)
  • Law Firm Cybersecurity (2)
  • NIST 800-63 (28)
  • Password Security (30)
  • Password Tips (51)
  • Regulation and Compliance (11)

Stay up to date

Research, news, and more right to your inbox

More

  • Learning about strong, but unsafe passwords
  • What is a credential stuffing attack?
  • What is account takeover (ATO) fraud?
  • Eliminating password reuse to prevent ATO fraud
  • Developer Documentation (APIs)

Recent blog posts

  • Should Your Business Prevent Leetspeak in Passwords?
  • CISA: The Risk of MFA Without Improving Password Security
  • It’s W0rld P@ssw0rd D@y!
  • [ Sign Up for a Free Account ]
  • Contact Us
  • 1-720-773-4515

Enzoic ©2022 | Privacy Policy | Acceptable Use

3800 Arapahoe Avenue, Ste 250 l Boulder, CO 80303

Enzoic’s password auditor provides a great baseline for assessing password vulnerability. Get next level of compromised credentials protection and try the full Enzoic for Active Directory at no cost.

Cookies

This website uses cookies to improve your experience. Continue to use the site as normal if you agree to the use of cookies. To find out more about our use of cookies or to opt-out, please see our Privacy Policy.

More Information
This site is for EDUCATIONAL PURPOSES ONLY.
Your password will be sent securely to the Enzoic servers to check if it is compromised. We do not store your password or use it for any other purpose. If you are not comfortable with this, do not enter your real password.
What is this?

Password Check is a free tool that lets you determine not just the strength of a password (how complex it is), but also whether it is known to be compromised. Billions of user passwords have been exposed by hackers on the web and dark web over the years and as a result they are no longer safe to use. So even if your password is very long and complex, and thus very strong, it may still be a bad choice if it appears on this list of compromised passwords. This is what the Password Check tool was designed to tell you and why it is superior to traditional password strength estimators you may find elsewhere on the web.

Why is it needed?

If you are using one of these compromised passwords, it puts you at additional risk, especially if you are using the same password on every site you visit. Cybercriminals rely on the fact that most people reuse the same login credentials on multiple sites.

Why is this secure?

This page, and indeed our entire business, exists to help make passwords more secure, not less. While no Internet-connected system can be guaranteed to be impregnable, we keep the risks to an absolute minimum and firmly believe that the risk of unknowingly using compromised passwords is far greater. Since our database of compromised passwords is far larger than what could be downloaded to the browser, the compromised password check we perform must occur server-side. Thus, it is necessary for us to submit a hashed version of your password to our server. To protect this data from eavesdropping, it is submitted over an SSL connection. The data we pass to our server consists of three unsalted hashes of your password, using the MD5, SHA1, and SHA256 algorithms. While unsalted hashes, especially ones using MD5 and SHA1, are NOT a secure way to store passwords, in this case that isn’t their purpose – SSL is securing the transmitted content, not the hashes. Many of the passwords we find on the web are not plaintext; they are unsalted hashes of the passwords. Since we’re not in the business of cracking password hashes, we need these hashes submitted for more comprehensive lookups. We do not store any of the submitted data. It is not persisted in log files and is kept in memory only long enough to perform the lookup, after which the memory is zeroed out. Our server-side infrastructure is hardened against infiltration using industry standard tools and techniques and is routinely tested and reviewed for soundness.

More…
  • Visit our FAQ to learn more
  • Contact us for press or sales inquiries
  • Add a free password strength meter to your website