Israeli cybersecurity managed detection and response services company CyberInt, in cooperation with Check Point Software Technologies, a leading provider of cyber-security solutions globally, led Brazilian authorities to cyber-criminal Douglas Arrial, who had created a DIY phishing kit he was selling on the Dark Web.

CyberInt delivers end-to-end cybersecurity managed detection, investigation and response services for digital businesses.

The initial attack was automatically detected by CyberInt’s Argos^™ digital risk protection platform. Argos drives real-time detection of threats to prevent fraud and cyber events and significantly reduce revenue loss via its unique artificial intelligence and machine-learning algorithms that drive contextualized and relevant detection.

Once the threat was detected, the CyberInt cyber expert analyst team performed deep-dive investigations on behalf of the client, a major global supermarket chain to protect their customers – the attack was targeting the chain’s customers to obtain their credential and personal information.

It was also increasing the chain’s liability and affecting their reputation of local Brazilian brands under attack.

During the process of tracking down the threat infrastructure, the CyberInt team found a part of the code referring to Douglas Zedn. Together with Check Point, they were then able to trace it back to his digital identity, including his Twitter handle.

In fact, Arrial used the same profile for both his personal and “professional” activities. This allowed them to uncover Arrial’s real identity, which helped lead to his arrest.

CyberInt’s research team operates under the aegis of its managed services intelligence-led operations, which tracks threat actors, their current tools and capabilities, along with their organized campaigns and the data they’ve already extracted, leveraging Argos^™ digital platform.

“Whenever our research teams find something critical, our policy is to notify law enforcement and the relevant enterprises – customers or not —to make sure we can prevent other people from being victimized,” said CyberInt CEO Amir Ofek. “Our end-to-end solution was able to deliver complete closure— from the initial detection, through highly automated and human analyst augmentation with deep-dive investigations to the clank of the cell door. It’s always exciting to see our cyber activities come to life and help lead to cybercriminals’ arrests.”