TEAM CYMRU - an Internet security research firm

Team Cymru provides unique, actionable intelligence based on unparalleled insight and analysis of malware and malicious activity on the Internet.   Team Cymru provides insight and reputation reports on BotNets, Malware, Phishing and Darknet scanners enabling partners to monitor or block compromised hosts before they can damage networks

• Cutting edge data and intelligence on
  
  • Botnet C&C's, Infected Hosts
  • IP Reputation
  • Malware
  • Rich Meta Data
  • Anti-Ddos
    
• Unique 'Actionable' Intelligence
  
• Considered the Market Leader in Malware based Intelligence
• Leading Security Experts Worldwide consider Team Cymru as the industry's best source of malicious threat intelligence

Chart of the number and locations for web based and IRC based botnets for 2010.

Team Cymru is a group of technologists interested in making the Internet more secure. We are a group of geeks who are passionate about network security and helping the community identify and eradicate problems within their networks. We work closely with and within Internet security communities, as well as with all manner of other organizations - after all, almost every organization in the modern world is connected to the Internet in some way or another, and they all need help to ensure that their parts of the network remain safe and secure.

Commercial Services

Team Cymru uses its research, analysis and expertise to extract useful insight from our exclusive, solely self-developed databases. Organizations are able to use this insight to augment a variety of detection, alerting and mitigation capabilities.  Contact us for more details on types of reports and information available,

Map of the same data of web based botnet command and control locations for 2010.

MALICIOUS ACTIVITY INSIGHT

Team Cymru provides insight and reputation reports on Botnets, Malware, Phishing, and Darknet scanners enabling partners to monitor or block compromised hosts before they can damage networks. Other reports can provide valuable insight into behavior captured during malware analysis enabling security analysts to augment forensic capabilities. The data used in producing this insight is obtained from our network of Darknet and malware monitoring pods, as well as other sources and is fully Team Cymru owned and licensed.

Depending on type, insight reports are updated near real time (every 15 minutes), hourly, or as a 24 hour aggregate. Team Cymru takes extreme care to monitor and vet these insight reports in order to minimize false positives and provide the quality and confidence you've come to expect from Team Cymru.

Our deep insight into what’s actually occurring on the Internet enables us to provide unique, actionable intelligence and data to our partners.

Team Cymru FAQ

How do I pronounce “cymru”?

This is the most common questionwe receive. “Cymru” is pronounced “kum-ree.” It is Welsh (a Celtic language, distantly related to Gaelic) for “Wales.”

Who belongs to Team Cymru?

Currently, Team Cymru consists of a few dozen hard-working folks who have experience in a variety of areas to include UNIX systems development (both application and kernel), IP network engineering, security analysis and applications, systems and network administration, network and hard drive forensics, malware analysis, penetration testing, and a variety of other areas. Together, Team Cymru employees have over 100 years of combined experience in information and network security.

Where is Team Cymru?

Team Cymru is a geographically-dispersed group of security professionals who are able to collaborate due to the benefits of the Internet. Our main office is in Florida. Our researchers have presences in the UK; Brazil; Poland; New Zealand; Australia; Arizona, US; Washington D.C., US; Illinois, US; and California, US. We have pods of gear all over the globe. We find that our geographic dispersion provides nearly 24/7 coverage and leads to an increased quality of life for our employees.

Team Cymru wins 2011 SURFcert Security Award

The team proudly accepted the 2011 SURFcert Security Award at the SURFcert security conference in Holland.

The award was for “...sterling work to improve the overall level of Internet security. Team Cymru’s non-profit status and the concrete way in which it provides operational support for CERTs all over the world has made it an important partner for non-commercial organizations such as SURFcert and its constituency”.

SURFnet itself is one of the premier European providers, serving Dutch Academic and Research organizations since the late 80’s.

Ian Cook, accepting the award, said “We’re honored and flattered to be recognized for our efforts by a world-class organization like SURFnet and we are, however, very grateful to have people around the world that recognize how important security is”.

Why Haven't you heard of us?

Team Cymru made a conscious decision to work exclusively with trusted partners in the IT Security Community. We are comfortable and successful being the behind the scenes partner. However, within these circles we are well known, including being recognized by eWeek. Although the majority of our insight is provided at no cost, we do offer services to fund our activities and ensure we are an on-going, vibrant company. In fact, the chances are good that if you are using a security product or service, our insight quietly makes it a bit more robust, insightful, and secure.