Activity Summary - Week Ending on 23 May 2025:
- Red Sky identified 16,345 connections from ‘new’ and unique, compromised IP addresses
- Proton[.]me in France hit 1,196x 2nd week
- RedSky Malicious OSINT Data Collection – last 7 Days
- CISA Alert – DEEBOT Vacuum
- CVE-2025-30198; CVE-2025-30200
- NPM Package
- National Cybersecurity Agency in Italy
- Malicious bots – SE Asia
- Brute-force Attacks - Vietnam
- Targeteer – RansomHub Group
Link to full report: IR-25-143-001_weekly143.pdf
