Activity Summary - Week Ending on 16 May 2025:
- Red Sky identified 16,345 connections from ‘new’ and unique, compromised IP addresses
- Proton[.]me in France hit 1,164x
- RedSky Malicious E-mail Data Collection – last 7 Days
- CISA Alert – Hitachi Energy Products
- CVE-2024-4872, CVE-2024-3980
- FakeUpdates, Remcos, and AgentTesla
- Education Attacks
- ROAMINGMOUSE and Upgraded ANEL Malware
- Nucor Steel Attack
- Targeteer - SatanLock
Link to the full report: IR-25-136-001_weekly136.pdf
