X-Industry

Activity Summary - Week Ending 17 September 2021:

• Red Sky Alliance identified 37,866 connections from new unique IP addresses
• Analysts identified 765 new IP addresses participating in various Botnets
• Compromised IP: 107.172.100.248
• Is it REvil or is it the Feds?
• BazarLoader
• QakBot
• BlackMatter and Cameras?
• Grayfly – an Arm of APT41
• EasyJet in the Crosshairs
• Just Who’s Winning the Cyber War?
• Tiananmen Square Memorials

Link to full report: IR-21-260-001_weekly_260.pdf

Activity Summary - Week Ending 13 November 2020:

• Red Sky Alliance observed 67 unique email accounts compromised with Keyloggers
• Analysts identified 42,222 connections from new unique IP addresses
• 2,563 new IP addresses were observed Participating in various Botnets
• Hezbollah is the Top Threat actor this week targeting Israel, US, Lebanon, Syria and Iran
• TrickBot and BazarLoader
• WatchBogMiner
• Ransomware blocks electronic Stadium Entrances
• A UK Premier League soccer club's Managing Director was H