ZeroFox and Mandiant Form Global Partnership to Take Down Online Threats

ZeroFox, which provides external threat intelligence and protection worldwide, has formed a global strategic partnership with Mandiant, part of the intelligence-led security company FireEye Inc. Under the deal, ZeroFox's tools for disrupting malicious activity on social media and other digital channels will be offered inside Mandiant's Advantage SaaS platform. Those tools include taking down malicious or offensive content and disabling fake accounts and websites.

Online threats against organisations keep growing, and ZeroFox argues that security teams need the means to stop attacks where they start. Since the pandemic pushed work fully remote, the company says it has recorded a 140% rise in domain-based attacks and a 300% rise in attacks on social media. Over the past year it has also seen requests to take down malicious content climb sharply, and its successful disruption actions have increased by more than 60% as social media impersonation, spoofed domains, phishing, fraud and ransomware have grown.

How the integration works

ZeroFox's disruption and takedown services will now be reachable from within Mandiant Advantage. Customers who subscribe to the Mandiant Advantage Digital Threat Monitoring service can review incidents on the Advantage dashboard and send them straight to ZeroFox's global disruption team, which then acts against the domain or social media attack.

According to the two companies, the joint offering provides disruption in three main ways:

• removing malicious websites and content through advanced domain takedown services, disrupting threat actors permanently;
• protecting customers' brands by blocking malicious URLs so employees and customers cannot reach them;
• remediating malicious URLs so that employees, customers and executives are kept away from phishing, ransomware and scams.

What the executives said

James C. Foster, chief executive of ZeroFox, said security teams need a different way of coping with how fast Internet-based attacks now arrive. ZeroFox's global intelligence and disruption capabilities, he said, let customers deal with threats at their source and at scale. He added that the company is working to build a global disruption network so that customers can fight back and gain a shared advantage over attackers.

Mike Armistead, senior vice president for Mandiant Advantage products at Mandiant, said security teams need something fast and dependable to deal with the increasingly complex digital assets attackers use against organisations. Mandiant was proud to work with ZeroFox to give customers of every size an extra layer of protection for their brand, he said. The joint product gives Mandiant Advantage customers direct access to disruption of attacker infrastructure, which Armistead said shortens the time needed to respond to and remediate threats that damage brand value.

The partnership brings the threat intelligence and protection capabilities of both companies together to disrupt threats aimed at organisations online.