Oil and Gas Brief 02 08 2019

Activity Summary - Week Ending 8 February 2019:

  • Wapack Labs identified 76,207 connections from new unique IP addresses
  • choongstephen29@gmail.com is a pwned Gmail from: Stephen Choong, Boten Laos
  • Top C2 IP in keylogger collection IP: 104.131.68.41, assigned to: Digital Ocean LLC, Clifton NJ USA
  • Wapack Labs data identified 2,262,678 new IP addresses participating in various botnets
  • Goblin Panda in Metadata
  • TA505 Continues to Target Financial Institutions and a threat to Oil and Gas
  • Huawei attempting to steal the tech behind T-Mobile’s robot mobile phone testing system – Tappy
  • Venezuela’s PDVSA is looking to sell more oil to Europe and Asia in light of US sanctions

Full report: IR-19-039-001OIL & GAS.pdf