Home

Red Sky^® Alliance

Wapack Labs has been serving information security professionals for over eight years. We invite businesses and organizations, enterprise to small businesses to learn more about cyber threats and how to avoid them. We provide reports, indicators, references and training about targeted, advanced, and emerging cyber threats in our private portal.

Red Sky^® Alliance offers TLP White and Green cyber threat reporting for targeted industry segments, international reports and malware/bot analyses.

Let us better prepare you and your team for new cyber threats.

Signing up for access to all content is simple, just enter your name and email address. Redskyalliance.org is free to members and no salesperson will call.

Ransomware as a Decoy

Posted by Mac McKee on January 22, 2021 at 2:04pm

Attacks involving million-dollar ransom demands attract headlines, but the payout is no longer the sole financial incentive for attackers. The exfiltration of critical data is a key motivator that can be used to extort victims into paying even larger fees to recover assets. Data, including intellectual property such as research and patents, is often targeted by organized groups or as part…

UK Financial Services Hit Hard During 2020

Posted by Mac McKee on January 22, 2021 at 2:02pm

Financial services firms in the UK were hit hard in 2020, with 70% experiencing a successful cyber-attack and most of these blaming COVID-related conditions for the incident, according to Keeper Security. The password security firm commissioned the Ponemon Institute to poll over 370 UK IT security leaders in the sector, as part of a larger global study. It revealed that the rapid…

MS Warning & Password Monitoring

Posted by Bill Schenkelberg on January 22, 2021 at 1:46pm

The president of Microsoft, Brad Smith, provided a warning of increasing cyber-threats to society as technology plays a more powerful role in our lives. This warning delivered during his recent talk at the Consumer Electronics Show (CES) 2021. Smith delineated the potential enormous benefits and advancements that technologies offer, including in areas like; sustainability, the…

TACTICAL CYBER REPORT: COMMUNICATION / SOCIAL MEDIA

Posted by Bill Schenkelberg on January 22, 2021 at 7:50am

Activity Summary - Week Ending 22 January 2021:

Keylogged: imports1@fairdealfurniture.biz - Mombasa Kenya
Red Sky Alliance observed 29 unique email accounts compromised with Keyloggers
Analysts identified 19,902 connections from new unique IP Addresses
1,957 new IP addresses participating in various Botnets
Ursnif (Gozi) banking…

Jokers Stash - Going out of Business?

Posted by Bill Schenkelberg on January 19, 2021 at 10:59am

Red Sky Alliance has long reported on the underground carding site – Joker’s Stash (JS). Well several research firms have identified that JS is ‘goiong out of business.’ Joker’s Stash is reportedly (or was…) the largest underground forum/shop for selling stolen credit card and identity data. JS is reporting they are closing its shop by the middle of February 2021. This news was…

OSAMiner, A Plague on macOS

Posted by Mac McKee on January 16, 2021 at 11:12am

A cryptocurrency mining campaign targeting macOS is using malware that has evolved into a complex variant giving researchers a lot of trouble analyzing it. The malware is tracked as OSAMiner and has been in the wild since at least 2015. Analyzing it has been difficult because payloads are exported as run-only AppleScript files, which makes decompiling them into source code…

Hacking COVID-19 Vaccine Documents or Foul Play During the Pandemic

Posted by Mac McKee on January 15, 2021 at 5:54pm

Hackers recently posted confidential documents regarding Covid-19 medicines and vaccines on the internet after a data breach late last year at the European Medicines Agency (EMA). Timelines related to evaluating and approving Covid medicines and vaccines haven’t been affected, the EMA said in a statement on Tuesday. The agency said it remains fully functional and that law enforcement…

TACTICAL CYBER REPORT: Manufacturing

Posted by Bill Schenkelberg on January 15, 2021 at 8:02am

Activity Summary - Week Ending 15 January 2021:

46 unique email accounts were seen compromised with Keyloggers
Red Sky Alliance identified 43,555 connections from new unique IP addresses
Analysts identified 2,201 new IP addresses participating in various Botnets
German - Strang 1&1 Ionos SE in the Top 10 C2 compromised Servers
Solar…

REDXRAY® TWO WEEK FREE TRIAL! SIGN UP TODAY

REDXRAY® DISCOVERY -- Daily Notification report of threats against your network. Two Week FREE TRIAL. Sign Up Today, We will get you started!

Schedule Your Demo Now 888-RedXray (888-733-9729)

Botnet Detection With Red Sky Alliance & IPinfo

Identify possible malware installations using either our botnet tracker collection or our sinkhole traffic collection. In many cases, it can also identify the malware protocol resulting in high confidence hits. This threat intelligence includes source IP addresses, destination IP addresses, domains, or URLs. DEMO SIGNUP

Webinars

Please Join our REDSHORT webinar. 'RED' as in something important from Red Sky Alliance and 'SHORT' as in 10 minutes or less twice a month. We will cover highlights of 1-2 trending topics, Trending Cyber Indicators, and include a link to a detailed report we will share. Our Encore presentations, also twice a month, same place & time, we will present previous webinars. Questions on any of these webinars can be answered in our redskyalliance.org Cyber Security Blog.

REGISTER HERE

In the News

Red Sky Alliance

For more information about Red Sky Alliance, follow the link, ABOUT

Cyber Security Blog

You need to be a member of Red Sky Alliance to add comments!

Join Red Sky Alliance

Comments

Jim McKee January 12, 2021 at 10:12pm

There were two segments, they did not let me off the hot seat for an hour. Here is the second one: https://youtu.be/pG9NYaDWHno
Jim McKee January 12, 2021 at 10:10pm

Security & Compliance Weekly had me on their panel this morning. If you missed it you can view it on https://youtu.be/ae65-tAjM90
Bill Schenkelberg January 6, 2021 at 8:45am

Check out the new (01 04 2021) Indicator Black List in the Indicators Channel.
Jonathon Sweeney January 5, 2021 at 12:38pm

T-Mobile has experienced their fourth major breach in three years...

"Fool me once, shame on you..."
Jim McKee December 30, 2020 at 10:12pm

2020 has been a challenging year for all of us is coming to an end. All of us at Red Sky Alliance want to wish our members, clients and friends the best of luck for the new year. Happy New Year.
Jim McKee December 22, 2020 at 5:24pm

The holiday season is here and most of us will be at home and sitting in our home offices. All of us at Red Sky Alliance wish our members Merry Christmas, Happy Holidays and best wishes for the new year.
Jonathon Sweeney December 15, 2020 at 9:15am

Want to learn more about the current SolarWinds attacks? Check us out on tomorrow's Threat Brief to learn more...
Jim McKee December 14, 2020 at 12:54pm

We have members on our portal from many countries. I welcome the submission of articles of interest to their industry segments and countries. I will be happy to review them for posting.
Bill Schenkelberg December 14, 2020 at 12:41pm

12 07 2020 Keylogger, Sinkhole and Botnet Tracker Black Lists - in Indicators Channel.
Bill Schenkelberg December 7, 2020 at 4:07pm

December 2020 issue of Phish & Ships in the Transportation Section. Check it out.

of 30

This reply was deleted.

E-mail me when people leave their comments –

#xg { position:relative;top:120px; } #xn_bar { top:120px; }

Hello, you need to enable JavaScript to use Red Sky Alliance.

Please check your browser settings or contact your system administrator.

Activity Summary - Week Ending 22 January 2021:

Activity Summary - Week Ending 15 January 2021:

Note: this page contains paid content.

Comments