X-Industry

Activity Summary - Week Ending on 24 November 2021:

• Red Sky Alliance identified 26,071 connections from new IP’s checking in with our Sinkholes
• Analysts identified 2,849 new IP addresses participating in various Botnets
• DigitalOcean in the Cross-Hairs Again
• Magniber Ransomware
• Ransomware Still #1
• Attack Framework - Left to Right
• Core to the Edge
• Iran Cyber Bullies & Mahan Airlines
• Asia Financial Targets
• CBDC
• Environmentalists Sharing the Brave New World

Link to full report: IR-21-328-001_weekl

Activity Summary - Week Ending 5 February 2021:

• Red Sky Alliance identified 34,976 connections from new unique IP addresses
• Greek Bank, Alpha Bank Group has an Attack Server (C2) Compromise
• DigitalOcean has a Compromised (C2) IP
• Analysts identified 2,089 new IP addresses participating in various Botnets
• PowerShell Dropping REvil
• Ursnif/Gozi using INPS as Bait
• How the World Ends
• US – Russia Cyber Strategy
• Rocket Chat (Al Qaeda) urging Cyber Terrorism
• Operation Lady-Bird
• Electric Grids – Still a