Intel Collaborates with Microsoft Against Cryptojacking
April 27, 2021 | Business WireEstimated reading time: 3 minutes
Microsoft Defender for Endpoint expands its use of Intel® Threat Detection Technology (Intel® TDT) beyond accelerated memory scanning capabilities to activate central processing unit (CPU) based cryptomining machine learning (ML) detection. This move further accelerates endpoint detection and response for millions of customers without compromising experience.
“This is a true inflection point for the security industry as well as our SMB, mid-market and enterprise customers that have rapidly adopted Windows 10 with built-in endpoint protections. Customers who choose Intel vPro® with the exclusive Intel® Hardware Shield now gain full-stack visibility to detect threats out of the box with no need for IT configuration. The scale of this CPU-based threat detection rollout across customer systems is unmatched and helps close gaps in corporate defenses,” said Michael Nordquist, senior director of Strategic Planning and Architecture in the Business Client Group at Intel.
About Intel Threat Detection Technology: Intel TDT, part of Intel® Hardware Shield’s suite of advanced capabilities on Intel vPro® and also available on Intel® Core™ platforms, equips endpoint detection and response (EDR) solutions with CPU heuristics for advanced memory scanning, cryptojacking and ransomware detection. With nearly a billion Intel TDT-capable PCs in the market, these are the only CPU-based malware behavior-monitoring capabilities in market that go beyond signature and file-based techniques.
“Intel is unlocking capabilities in its system on a chip that fundamentally change the rules of the game,” said Frank Dickson, program vice president of Security and Trust at IDC. “The silicon-level telemetry and functionality enable the hardware compute platform to play an active role in threat defense against ‘above-the-OS’ attacks. Clearly the goal is to empower Intel®-based systems of today and tomorrow to be fundamentally more secure and have lower malware infection rates than AMD, Apple and other ARM-based processor systems.”
Why It Matters: In April 2020, nearly 5,400 cryptocurrencies with a total market capitalization of $201 billion were traded. Since then, the market value has increased as cryptocurrency is making its way into the mainstream. The financial rewards of cryptocurrency create new threats and risks. As their value rises, cybercriminals shift their focus from ransomware to cryptojacking.
Cryptojacking is malicious cryptomining where cybercriminals install malware into business and personal computers, laptops and mobile devices. This malware uses the computer's power and resources to mine for cryptocurrencies or steal cryptocurrency wallets that can slow computers dramatically and keep them from operating normally. Some cryptojacking scripts have worming capabilities that allow them to infect other devices and servers on a network.
How Intel TDT Works: Intel TDT helps endpoint security solutions harness CPU telemetry and hardware acceleration to help identify threats and detect anomalous activity. It uses a combination of CPU telemetry and machine learning (ML) heuristics to detect specific behavior. The CPU performance monitoring unit (PMU) sits below the applications, operating system and virtualized layers to provide a greater view into active threats across the stack. Intel TDT bolsters EDR solutions and improves visibility where it has historically been a challenge, including the increasing trend of malware attempts to cloak itself in a virtual machine.
“This partnership is one example of our ongoing investment and deep collaboration with technology partners across the industry. We work closely with chipmakers to explore and adopt new hardware-based defenses that deliver robust and resilient protection against cyberthreats,” Karthik Selvaraj, principal security research manager at Microsoft. “As organizations look to simplify their security investments, built-in platform-based security technologies, such as the integration of Intel TDT with Microsoft Defender for Endpoint, combine best of breed in a streamlined solution.”
As threats are detected, Intel TDT sends a high-fidelity signal that triggers remediation workflows of EDR solutions to help protect the infected PC and prevent lateral movement across the corporate fleet. The telemetry and ML heuristics are seamlessly incorporated as part of the endpoint solution and multiple concurrent detectors can run in parallel.
This advanced threat detection doesn’t create a performance hit requiring IT leaders to make a tradeoff between better security or a good user experience. Intel TDT can offload performance-intensive security workloads to the integrated graphics controller and return performance back to the CPU, allowing for increased scanning and reduced impacts to the computing experience.
The threat detection capabilities are native to Intel Core and vPro platforms and operate seamlessly with EDR solutions without the need for installation or deployment IT configuration. When combined with remote monitoring and maintenance, rigorous cybersecurity defenses of Intel Hardware Shield, and no-contact deployment of the 11th Gen Intel® Core™ vPro® mobile processor, customers are assured they have the world’s most comprehensive hardware-based security for business.
Suggested Items
Real Time with... IPC APEX EXPO 2024: Exploring Silicone Solutions with R&D Director of CHT
04/17/2024 | Real Time with...IPC APEX EXPOIn this interview, Gerry Ellis, the R&D director for CHT, discusses the product range offered by his company. He explains the challenges in creating base formulations, the drive to make products more user-friendly, and the various application techniques involved. Ellis also highlights the key market segments and the significance of providing efficient solutions to customers.
Gartner Forecasts Worldwide IT Spending to Grow 8% in 2024
04/17/2024 | Gartner, Inc.Worldwide IT spending is expected to total $5.06 trillion in 2024, an increase of 8% from 2023, according to the latest forecast by Gartner, Inc. This is an increase from the previous quarter’s forecast of 6.8% growth and puts worldwide IT spending on track to surpass $8 trillion well before the end of the decade.
Catching Up With Chasom Electronics
04/16/2024 | Dan Beaulieu, D.B. Management GroupI recently met with Chasom Electronics’ founding director Anil Kumar. Chasom offers a unique menu of services for companies looking to extend their technology capabilities on a short- or long-term basis. Read on to learn about this very unique service company.
Cicor Records Solid Growth in Q1
04/16/2024 | CicorThe Cicor Group continued to grow in the first three months of the year. Quarterly sales increased by 11.8% to CHF 107.3 million compared to the first quarter of the previous year (Q1/2023: CHF 96.0 million).
Real Time with... IPC APEX EXPO 2024: A Strategic Market Realignment
04/16/2024 | Real Time with...IPC APEX EXPOMarcy LaRont hosts Thomas Kunz of Schmoll Maschinen GmbH and Kurt Palmer of newly formed Schmoll America to discuss the strategic changes and developments at Schmoll with their departure from Burkle North America in this Real Time with... IPC APEX EXPO 2024 video interview.