Cyberint

Cyberint is a cybersecurity company focused on identifying, investigating, and mitigating threats that originate outside an organization's traditional network perimeter. Founded in 2009 by Itay Yanovski, Raz Alon, and Shay Priel, the company developed a portfolio centered on external cyber-risk visibility: threat intelligence, attack-surface management, brand protection, deep- and dark-web monitoring, and supply-chain intelligence. Its services are designed to help organizations discover exposed assets, identify compromised credentials and emerging criminal activity, detect impersonation and phishing campaigns, and assess risks introduced by suppliers and other third parties. Cyberint's approach combines collection and analysis of information from open sources, underground forums, deep-web communities, and dark-web marketplaces. This intelligence-oriented model is intended to give security teams advance warning of threats that may not yet be visible through conventional endpoint or network controls. The company's external-risk capabilities also support investigation and mitigation, including the identification of malicious infrastructure, unauthorized use of corporate brands, and evidence of data exposure. The company gained public attention in 2016 after its research was cited in connection with discussions on dark-web forums concerning attacks against Tesco Bank accounts. BBC News reported that the forum activity was identified roughly two months before Tesco Bank publicly announced a loss of £2.5 million. The episode illustrated Cyberint's emphasis on monitoring criminal ecosystems and using underground intelligence to identify threats before they become widely reported incidents. Cyberint expanded its product scope over time. In April 2023 it introduced a supply-chain intelligence module intended to help organizations evaluate and mitigate risks associated with third-party vendors and partners. This complemented its existing external-risk capabilities by extending monitoring beyond an organization's own digital footprint to the broader ecosystem on which its operations depend. Check Point Software Technologies announced an agreement to acquire Cyberint on August 27, 2024. The transaction was completed on October 1, 2024, after which Cyberint was integrated into Check Point's External Risk Management activities. The business is therefore best understood today as a Check Point-owned cybersecurity capability and brand rather than as an independent standalone company. Around the acquisition announcement, the Cyberint Research Team also disclosed UULoader, a malware loader that masquerades as legitimate application installers and uses DLL side-loading to deliver payloads including Gh0st RAT and Mimikatz, with reported targeting concentrated among Chinese- and Korean-language users.

Cyberint was established in 2009 by Itay Yanovski, Raz Alon, and Shay Priel as a cybersecurity company concentrating on intelligence about threats beyond the conventional corporate perimeter. Its operating model drew on the collection and analysis of information from public websites, underground communities, deep-web services, and dark-web forums. The objective was to give organizations earlier visibility into criminal activity, exposed data, vulnerable digital assets, and misuse of their identities. The company became associated with the practical value of underground intelligence in 2016. According to reporting summarized in the Cyberint article, the company found dark-web forum discussions dating from September of that year that indicated successful brute-force attacks against Tesco Bank accounts. The discovery preceded Tesco Bank's public announcement of a £2.5 million loss by approximately two months. The episode helped illustrate the type of early-warning intelligence Cyberint sought to provide: information gathered from criminal channels that could reveal an impending or ongoing incident before it was formally disclosed by the affected organization. Cyberint's leadership changed during the late 2010s and early 2020s. Amir Ofek served as chief executive from 2016 to 2019, followed by Itai Margalit from 2019 to 2020. Yochai Corem was appointed chief executive in August 2020. During this period, the company continued developing its external-risk portfolio beyond traditional threat reporting, including capabilities for monitoring attack surfaces, protecting brands from impersonation and phishing, and finding evidence of credentials or data appearing in underground environments. On April 20, 2023, Cyberint launched a supply-chain intelligence module. The module extended the company's monitoring model to third-party vendors and business partners, recognizing that suppliers can introduce security weaknesses or become channels through which attackers reach an organization. This product complemented Cyberint's existing external-threat intelligence, attack-surface management, brand-protection, and deep- and dark-web monitoring services. Cyberint's ownership changed in 2024. On August 27, Check Point Software Technologies announced its intention to acquire the company. The deal was completed on October 1, 2024, and Cyberint was integrated into Check Point's External Risk Management division. The acquisition moved Cyberint from an independent cybersecurity firm into the Check Point group while preserving its relevance as a set of external-risk capabilities and a recognizable product brand. In the same period, Cyberint's research operation reported UULoader. The loader was described as disguising itself as legitimate application installers and using DLL side-loading to deliver payloads including Gh0st RAT and Mimikatz. The reported activity primarily targeted users of Chinese- and Korean-language content. This disclosure reflects Cyberint's continuing role in researching and communicating emerging threats even as its business became part of Check Point.

• 2024

  Check Point acquisition completed

  [1]Cyberinten.wikipedia.org

  Check Point Software Technologies completed its acquisition of Cyberint and integrated the company into its External Risk Management division.

• 2023

  Supply-chain intelligence module launched

  [1]Cyberinten.wikipedia.org

  Cyberint introduced a capability for assessing and mitigating risks associated with third-party suppliers and partners.

• 2020

  Yochai Corem became CEO

  [1]Cyberinten.wikipedia.org

  Yochai Corem succeeded Itai Margalit as chief executive.

• 2016

  Tesco Bank-related dark-web intelligence reported

  [1]Cyberinten.wikipedia.org

  Cyberint identified underground discussions that reportedly indicated attacks against Tesco Bank accounts before the bank disclosed its loss.

• 2009

  Cyberint founded

  [1]Cyberinten.wikipedia.org

  Itay Yanovski, Raz Alon, and Shay Priel founded Cyberint as a cybersecurity and external-threat intelligence company.

Cyberint positions its offering around external risk management: discovering threats, exposed assets, compromised information, impersonation, and third-party weaknesses across open, deep, and dark web environments before they develop into material business impact.

• Cybersecurity intelligence

  Threat Intelligence

  Cyberint's threat-intelligence capabilities analyze information from open sources, deep-web communities, and dark-web environments to identify emerging threats, criminal activity, exposed data, and indicators that may affect an organization. The service is intended to support earlier investigation and response by connecting underground discussions and external observations with an organization's risk profile.

• External asset security

  Attack Surface Management

  The attack-surface management offering helps organizations identify and monitor internet-facing digital assets and weaknesses that may be visible from outside the corporate network. It is positioned as a way to improve visibility into exposed infrastructure and prioritize external vulnerabilities before attackers exploit them.

• Digital risk protection

  Brand Protection

  Cyberint's brand-protection capabilities monitor for unauthorized use of corporate identities, phishing sites, impersonation, and related malicious activity. The offering is intended to help organizations detect threats that misuse their names or brands and support mitigation of fraudulent external content.

• Cyber threat monitoring

  Deep and Dark Web Monitoring

  This service monitors underground web environments for signs of stolen credentials, leaked information, criminal planning, malware activity, and other threats relevant to an organization. Its purpose is to surface intelligence that would not normally appear in ordinary web or internal-security monitoring.

• Third-party risk management · 2023

  Supply Chain Intelligence

  Introduced in 2023, the supply-chain intelligence module extends external-risk monitoring to vendors, suppliers, and other business partners. It is designed to help organizations discover third-party weaknesses and external warning signs that could create indirect exposure to their own operations.

• 2024

  Acquisition by Check Point Software TechnologiesM&A

  Background

  Check Point sought to expand its external-risk management capabilities through Cyberint's threat intelligence and external digital-risk expertise.

  Action taken

  Check Point announced the intended acquisition on August 27, 2024, and completed the transaction on October 1, 2024.

  Aftermath

  Cyberint was integrated into Check Point's External Risk Management division and ceased to operate as an independent company.

  Source

• 2023

  Launch of supply-chain intelligenceProduct launch

  Background

  Third-party suppliers and partners can introduce security risks that are not visible through monitoring of an organization's own assets alone.

  Action taken

  Cyberint launched a supply-chain intelligence module to assess and help mitigate risks connected with external vendors and partners.

  Aftermath

  The module broadened Cyberint's external-risk portfolio beyond direct asset, brand, and underground-threat monitoring.

  Source

• Unconfirmed

  Cyberint launches Argos Edge platform[2]Cyberint launches Argos Edge platformsourcesecurity.com

  Cyberint launched Argos Edge, a SaaS-based Digital Risk Protection platform designed to provide real-time responses to cyber threats beyond traditional security perimeters.

Read more

1. 1Cyberinten.wikipedia.org
2. 2Cyberint launches Argos Edge platformsourcesecurity.com