Activity Summary - Week Ending 5 July 2019:
- Wapack Labs identified 79 unique email accounts compromised with keyloggers;
- Analysts identified 68,950 sinkhole connections from new unique IP addresses
- Proprietary sources identified 645,174 new IP addresses participating in various botnets
- CVE-2017-11882 Email Campaign
- Oilfield services company Schlumberger targeted in phishing campaign
- Mimikatz and Oil
- Ryuk Strikes Again
- Sodinokibi
- APT33, Shamoon – Iran
- VLCC Grace 1 further detained in Gibraltar with Iranian oil
- Hong Kong protest Persist
- Venezuela selling oil to Turkey
Link to full report: TACTICAL CYBER REPORT-OIL & GAS 07122019.pdf