apt31 (3)

12912122879?profile=RESIZE_400xSo maybe China and Russia are not such good friends after all.  Cyber security researchers have uncovered an apparently new Advanced Persistent Threat (APT) group targeting Russian government entities, known as CloudSorcerer.  They use a sophisticated cyber espionage tool, discovered by investigators and reported in an advisory they published in June, and is designed for covert data collection and exfiltration, using Microsoft Graph, Yandex Cloud, and Dropbox for its command and control (C2) inf

9450988701?profile=RESIZE_400xActivity Summary - Week Ending 20 August 2021:

  • Red Sky Alliance observed 21 unique email accounts compromised with Keyloggers
  • Beware of vadmin-vad05
  • Analysts have identified 24,404 connections from new unique IP addresses
  • 2,573 new IP addresses participating in various Botnets were seen this past week
  • APT31
  • APT Attack / Kimsuky
  • APT1 - Common Crew
  • Darkside and BlackMatter (a Hive connection?)
  • Defense Industrial Base (DIB) / Israel
  • Health Care / US, Ohio
  • Indra / Hackers Behind Recent Attacks on I

8646907101?profile=RESIZE_400xIn 1980, the British comedy group Monty Python created a video, “I Like Chinese.”  We all like Chinese; except the Chinese Communist Party (CCP) – who train, encourage and promote active hacking of many, many counties.  A Chinese hacking group allegedly "cloned" and deployed a zero-day exploit developed by the US National Security Agency's Equation Group (NSA) before Microsoft patched the Windows vulnerability that was being exploited in 2017.  For several years, researchers have suspected the C