Home

Red Sky^® Alliance

Wapack Labs has been serving information security professionals for over eight years. We invite businesses and organizations, enterprise to small businesses to learn more about cyber threats and how to avoid them. We provide reports, indicators, references and training about targeted, advanced, and emerging cyber threats in our private portal.

Red Sky^® Alliance offers TLP White and Green cyber threat reporting for targeted industry segments, international reports and malware/bot analyses.

Let us better prepare you and your team for new cyber threats.

Signing up for access to all content is simple, just enter your name and email address. Redskyalliance.org is free to members and no salesperson will call.

IcedID Is Not A Cold Drink

Posted by Mac McKee on April 16, 2021 at 3:04pm

IcedID, also known as Bokbot is a banking trojan and information stealer and can be used as an entry point for subsequent attacks, such as manually operated ransomware for high-value targets. It is typically proliferated using another trojan called Emotet, which is often distributed using spam email campaigns. Human-operated ransomware attacks are increasingly common…

INTELLIGENCE REPORT: STATE LEVEL HACKERS

Posted by Bill Schenkelberg on April 16, 2021 at 12:54pm

Activity Summary - Week Ending 16 April 2021:

Red Sky Alliance observed 58 new unique email accounts compromised with Keyloggers
Analysts identified 30,373 connections from new unique IP addresses
3,512 new IP addresses participating in various Botnets were Observed
Security Researcher under Attack
CISA’s New Tool –…

Babuk and Basketball

Posted by Bill Schenkelberg on April 15, 2021 at 10:20am

The Houston Rockets professional basketball team is reporting that their security and law enforcement authorities are investigating a cyber-attack. Officials are claiming a new hacking group attempted to install ransomware on the basketball team’s internal systems. “The Rockets organization recently detected suspicious activity on certain systems in its internal network. We…

Android System Update May Contain Spyware

Posted by Jim McKee on April 15, 2021 at 9:22am

Researchers have discovered a new information-stealing Trojan, which targets Android devices with a blitz of data-exfiltration capabilities from collecting browser searches to recording audio and phone calls. While malware on Android has previously taken the guise of copycat apps, which go under names similar to legitimate pieces of software, this clever new malicious app masquerades…

American Sign Language and Cyber

Posted by Bill Schenkelberg on April 15, 2021 at 8:48am

A recent article from the University of Boston provides a very refreshing article about cyber technology helping the deaf. The words “joke” and “ruin” might not rhyme in English - but, thanks to a new, interactive database of American Sign Language (ASL), called ASL-LEX 2.0[1], we can now see that these two words do in fact rhyme in ASL.

“In ASL, each word…

Verizon Mobile Security Index -MSI- 2021

Posted by Jim McKee on April 14, 2021 at 1:33pm

The COVID-19 pandemic is now a year old and has forced businesses to quickly support remote working practices, often without proper security measures in place. The Verizon Business Mobile Security Index (MSI) 2021 reveals that many businesses may have left themselves vulnerable and open to cybercriminals in the rush to ensure their workforce could operate remotely. Forty-nine (49)…

Do I Really Want to Connect with you on LinkedIn?

Posted by Mac McKee on April 13, 2021 at 11:05am

LinkedIn is a great portal to increase your professional network and there are actors who really want to connect with you and your connections. Remember, people often look at mutual connections before accepting some on they do not know personally. A casual acceptance can lend credibility to hackers’ requests to connect.

A North Korean government-backed campaign targeting…

Ransomware Headaches

Posted by Mac McKee on April 13, 2021 at 11:00am

Organizations continue to fall victim to ransomware, and yet progress on tackling these attacks, which now constitute one of the biggest security problems on the internet, remains slow. From small companies to councils, government agencies and big business, the number and range of organizations hit by ransomware is rising. One recent example; schools with 36,000 students have been hit,…

REDXRAY® TWO WEEK FREE TRIAL! SIGN UP TODAY

REDXRAY® DISCOVERY -- Daily Notification report of threats against your network. Two Week FREE TRIAL. Sign Up Today, We will get you started!

Schedule Your Demo Now 888-RedXray (888-733-9729)

Botnet Detection With Red Sky Alliance & IPinfo

Identify possible malware installations using either our botnet tracker collection or our sinkhole traffic collection. In many cases, it can also identify the malware protocol resulting in high confidence hits. This threat intelligence includes source IP addresses, destination IP addresses, domains, or URLs. DEMO SIGNUP

Webinars

Please Join our REDSHORT webinar. 'RED' as in something important from Red Sky Alliance and 'SHORT' as in 10 minutes or less twice a month. We will cover highlights of 1-2 trending topics, Trending Cyber Indicators, and include a link to a detailed report we will share. Our Encore presentations, also twice a month, same place & time, we will present previous webinars. Questions on any of these webinars can be answered in our redskyalliance.org Cyber Security Blog.

REGISTER HERE

In the News

Red Sky Alliance

For more information about Red Sky Alliance, follow the link, ABOUT

Cyber Security Blog

You need to be a member of Red Sky Alliance to add comments!

Join Red Sky Alliance

Comments

Bill Schenkelberg April 15, 2021 at 9:03am

On 15 April the Houston Rockets of the National Basketball Association (NBA) reported they are investigating a cyber-attack against their networks from a relatively new ransomware group that claims to have stolen internal business data. The hacking group: Babuk
Jim McKee April 7, 2021 at 5:45pm

Did you ever wonder what my office looks like? Take a look and listen to one of of my recent interviews. https://www.linkedin.com/feed/update/urn:li:activity:67854831587259...
Jim McKee March 10, 2021 at 5:15pm

Red Pane Released to the public this week: https://www.linkedin.com/feed/update/urn:li:activity:67751531235446...

Jim McKee on LinkedIn: Targeted Dark Web Analysis Engine for Your Cyber Threat Intelligence

https://lnkd.in/ez9q7Gv The targeted Dark Web intelligence provided by our REDPANE product is an Analysis Engine for your Cyber Threat Intelligence T…
Bill Schenkelberg March 9, 2021 at 3:26pm

US CISA has two new publications related to Microsoft Exchange vulnerabilities; details are provided below.
CISA page: Remediating Microsoft Exchange Vulnerabilities (TLP:WHITE) https://us-cert.cisa.gov/remediating-microsoft-exchange-vulnerabili...
CISA Current Activity: CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities (TLP:WHITE) https://us-cert.cisa.gov/ncas/current-activity/2021/03/08/cisa-stro...

Remediating Microsoft Exchange Vulnerabilities | CISA

Note: CISA will update this web page as we have further guidance to impart.
Bill Schenkelberg March 9, 2021 at 11:48am

You Can Run, but you Can't Hide - South Korean national police have announced today the arrest of a 20-year-old suspect on charges of distributing and infecting victims with the GandCrab ransomware.
The suspect, whose name was not released, operated as a customer of the GandCrab Ransomware-as-a-Service (RaaS) cybercrime operation.
Known as an affiliate — or a distributor— police say the suspect operated by taking copies of the GandCrab ransomware and distributing them via email to victims across South Korea.
Jim McKee March 8, 2021 at 5:08pm

More news on our RedPane Dark Web search engine coming out this week. Please visit https://www.wapacklabs.com/redpane

RedPane — Wapack Labs
Jim McKee March 1, 2021 at 6:18pm

The Rise of the Data Marketplaces. I was interviewed by Micaela Mengan and here is the link: https://www.linkedin.com/feed/update/urn:li:activity:67722830322180...
Bill Schenkelberg February 26, 2021 at 12:58pm

If you read about CityBee, hacks can happen; anywhere and at any time - Regardless of location. The legitimate and illegitimate Internet has no borders. All companies and businesses need a reasonable level of network protection and sound cyber security procedures and training. Is that all a network needs? No. Had the big-mouthed hacker not announced the CityBee breach and subsequent on-line sale of data – the victims would not know what happened. Enter Red Sky Alliance and CTAC/RedXray and it RedPane dark web collection and analysis component. Our products help further protect your network against hacking and later anguish. Our tools and services are an excellent complement to a network defense for any foreign or domestic cyber threat (even in Lithuania). In addition to offering cyber protection, we offer cyber insurance through Cysurance. Call today for a quote.
Bill Schenkelberg February 26, 2021 at 8:36am

Watch for our up-coming RedShort series: A View from Team Jaeger.
Jim McKee February 18, 2021 at 4:07pm

What is your view into the dark web? RedPane is ours. https://www.wapacklabs.com/news/2021/2/16/redpane

Red Sky® Alliance Introduces Their Dark Web Search Engine REDPANE — Wapack Labs

of 32

This reply was deleted.

E-mail me when people leave their comments –

#xg { position:relative;top:120px; } #xn_bar { top:120px; }

Hello, you need to enable JavaScript to use Red Sky Alliance.

Please check your browser settings or contact your system administrator.

Activity Summary - Week Ending 16 April 2021:

Note: this page contains paid content.

Comments