IBM Security X-Force incident response and intelligence service analysts have observed many real-world threat groups. IBM’s threat intelligence helped stop a MegaCortex ransomware attack before it was executed last year. IBM does this by investigating their malicious campaigns using a variety of open, enterprise and IBM tools and repositories, tracking sales and activities on the dark web, and using Quad9 to track malicious IPs and domains associated with threat groups we follow. IBM: Cybersecurity threat intelligence teams should conduct extensive research on several cybercriminal groups.”]