Home

Red Sky® Alliance has been serving information security professionals for over twelve years. We invite businesses and organizations, from enterprises to small businesses, to learn more about cyber threats and how to avoid them. We provide TLP White and Green cyber threat reporting for targeted industry segments, international reports, and malware/bot analyses.

A privately held USA-owned cyber threat intelligence firm that delivers proprietary cyber threat intelligence datasets and services. Our company provides insightful, actionable intelligence in formats best suited to your strategic, operational, and tactical needs.

 

Let us better prepare you and your team for new cyber threats.

Redskyalliance.org offers free access to all, and no salesperson will call.

21st Century Mercenaries

31242336689?profile=RESIZE_400x US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare.  This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries.  Under this new…

Read more…

Mabna Institute

31229963458?profile=RESIZE_400x Mabna Institute is an Iran-based organization alleged by US authorities to have operated a large, coordinated credential-theft and data-exfiltration campaign since at least 2013.  Its principal targets were universities and research institutions, but the victim set also included private companies, government agencies, and international organizations.  US prosecutors allege that the…

Read more…

ToxicPanda

31244160457?profile=RESIZE_400x The zLabs team recently identified an updated variant of ToxicPanda, the Android banking Trojan known to have primarily targeted Europe, that introduces significant enhancements, including a comprehensive command set of 167 remote commands and substantially expands its targets globally.  Among the newly added capabilities is a PIN theft mechanism targeting more than 140 banking…

Read more…

Chaos Ransomware

31241480260?profile=RESIZE_400x Assessment: Chaos presents a high enterprise risk because the name now refers to two related but operationally distinct threat streams: the widely copied Chaos builder that emerged in 2021, and a newer ransomware-as-a-service operation observed from 2025.  Early builder versions behaved partly as destructive wipers; later variants supported recoverable encryption.  The newer operation…

Read more…

31242335458?profile=RESIZE_400x Imagine you receive a large box of numbers meant to serve as a public key for secure communication.  The numbers look completely random, the way scrambled data should look if no one can find a pattern.  Yet a careful test reveals a subtle internal order.  That is the main finding of a recent paper by Ashrujit Ghoshal, Yuval Ishai, Aayush Jain, and Nuozhou Sun titled “Quasipolynomial…

Read more…

Attackers Use Typo-Squatting to Distribute Malware

31242129472?profile=RESIZE_400x Recent findings from Sophos highlight a worrying trend: cybercriminals are capitalizing on global interest in artificial intelligence.  By impersonating established AI brands such as Perplexity, Claude, ChatGPT, and Copilot, these attackers are successfully tricking individuals and businesses into downloading malicious software.   This campaign exploits users' eagerness to adopt the…

Read more…

31241505094?profile=RESIZE_400x Labor Day creates a predictable operational window that can favor cyber adversaries: offices close, security and IT staffing decline, senior decision-makers travel, vendors operate on reduced schedules, and suspicious activity can remain untriaged for longer.  The principal concern is not a uniquely “Labor Day” malware family, but the deliberate timing of ransomware, data theft,…

Read more…

Is that my Photo?

31224322883?profile=RESIZE_400x Cybersecurity researcher Jeremiah Fowler has identified a significant data exposure involving millions of private facial images.  In a collaborative investigation conducted with ExpressVPN, Fowler discovered a publicly accessible database containing approximately 9,042,977 images.   The collection, totaling 450.2GB of data, was found with no password protection or encryption, leaving…

Read more…

In the News

REDSHORT Webinars

Please Join our REDSHORT webinars. 'RED' as something important from Red Sky Alliance, and 'SHORT' in 10 minutes or less weekly. We will cover highlights of trending topics.

REGISTER HERE

Cyber Security Blog

You need to be a member of Red Sky Alliance to add comments!

Comments are closed.

Comments

This reply was deleted.

Red Sky Alliance

For more information about Red Sky Alliance, follow the link, ABOUT