Activity Summary - Week Ending on 21 March 2025:
- Red Sky identified 13,150 connections from ‘new’ and unique, compromised IP addresses
- RouterHosting LLC in Netherlands hit 200x
- CISA Alert – RaaS Medusa Ransomware
- Rclone
- TinyShell Back Door
- Juniper Routers / Junos OS MX
- 137% more DDoS attacks in Europe
- UNC3886 Threat Group
- Ohio Municipal Court still down after 3 Weeks
- SideWinder - Targeteer
Link to full Report: IR-25-080-001_weekly080.pdf