X-Industry

Activity Summary - Week Ending 9 October 2020:

• Red Sky Alliance analysts identified 2,258 new IP addresses participating in various Botnets
• Analysts observed 28 unique email accounts compromised with keyloggers
• Red Sky Alliance identified 45,867 connections from new unique IP addresses
• Finspy Malware Part 2
• MoDi RAT Leverages OneDrive Cloud Storage
• Microsoft DDR
• Nobel and Chevron
• Denmark and Nord Stream 2
• Russia ups oil Output
• Armenia and Azerbaijan still at it, compromising oil pipelines
• Norwa

Activity Summary - Week Ending 25 September 2020:

• Analysts identified 3,021 new IP addresses participating in various Botnets
• Red Sky Alliance observed 56 unique email accounts compromised with Keyloggers
• RSAC identified 46,283 connections from new unique IP addresses
• Winnti Group and the Shadowpad Backdoor
• Baka JavaScript Skimmer Stealing Credit Card Data
• Zap Energy – Zapped
• OIL / GAS vs. Renewable Energy
• $40.00 a Barrel, Stagnant + -
• Libya pumping Oil
• ReconAfrica targeted by Environmentalists

Activity Summary - Week Ending 11 September 2020:

• Red Sky Alliance observed 97 unique email accounts compromised with Keyloggers
• Analysts identified 69,770 connections from new unique IP addresses
• The BeagleBoyz are robbing Banks
• Analysts identified 4,775 new IP addresses participating in various Botnets
• Box Pages Utilized in Phishing Attacks
• Netwalker Ransomware in Argentina
• Oil Prices in a new “Supercycle”
• Iranian tankers possibly heading to Venezuela in defiance of US sanctions
• Germany – Nor

Activity Summary - Week Ending 28 August 2020:

• Fairdeal Furniture LTD, located in Mombasa Kenya is still Keylogged
• Red Sky Alliance observed 26 unique email accounts compromised with Keyloggers
• Analysts identified 68,495 connections from new unique IP addresses
• Red Sky Alliance identified 3,148 new IP addresses participating in various Botnets
• Team TNT targeting AWS using Kinsing variant
• Maze Ransomware
• US SBA Loan Relief Phishing Campaign
• Oil prices remain somewhat stagnant – even with Hurrica

Activity Summary - Week Ending 21 August 2020:

• Red Sky Alliance observed 15 unique email accounts compromised with Keyloggers
• Videoholka still is Keylogged
• Analysts identified 47, 658 connections from new unique IP addresses
• 3,294 new IP addresses participating in various Botnets
• Drovorub Malware Exposed
• FritzFrog P2P botnet struck at least 500 government and enterprise SSH servers
• COVID-19 Variants
• Magecart Group 8
• Oil Prices stuck in the $40-$45 Range
• Petrobas and Microsoft working together f

Activity Summary - Week Ending 17 July 2020:

• Red Sky Alliance identified 57,886 connections from new unique IP addresses
• Analysts identified 3,052 new IP addresses participating in various Botnets
• Buffalo Vastitude is Compromised
• ShinyHunters is on the Top 5 Threat Actor List
• Thanos Ransomware
• OT Ransomware Ekans
• Outlaw Botnet
• Oil Prices remain around the low $40 a barrel
• Oil Merchant Tanker hiding in Iran waters
• UK cuts ties with Huawei, China not Happy
• Libya’s eastern government asking Egypt

Activity Summary - Week Ending 22 May 2020:

• Red Sky Alliance observed 68 unique email accounts compromised with Keyloggers
• Analysts identified 53,148 connections from new unique IP addresses
• MinaOTP and Lazarus
• EVILNUM
• OPEC+ Cuts appear to be Working
• Angola’s Oil Production comes to a Halt
• More Nord Stream 2 legal action in Europe
• Oil Prices continue an Up-hill, See-Saw Climb
• Iran sending Crude Oil to Venezuela, both defying Sanctions
• The Oil Rich South China Sea still in Dispute
• Greta wins a W

- Red Sky Alliance identified 73,420 connections from new unique IP addresses
- Analysts identified 4,896 new IP addresses participating in various Botnets
- Hoe Hin & Sons, a Malaysian Yamaha Distributorship Keylogged
- Rx and BioChem Companies being Targeted, Hmmmmm…..Anyone Wonder Why?
- APT41 (Winnti) Attack with New Variant
- PoetRAT: Python RAT
- Oil Supply Chain
- Oil rich Libya still in Flux
- Russia planning to cut Oil exports from its Baltic and Black Sea ports
- PEMEX in the middle of Oil Deb

Activity Summary - Week Ending 10 April 2020:

• Red Sky Alliance identified 52,538 connections from new unique IP addresses
• Who’s Faru Potter? Well, he’s pwned
• APT32, Bitter APT and Kimsuky group taking advantage of the COVID-19 pandemic
• "New" Crown Pneumonia Ransomware, dusted off and Operable
• Firefox Browser Zero-Day Vulnerabilities - Extended Support Release 68.6.1 – fix ASAP
• 3M on hackers Radar Screen, Again
• Brent crude up to $33.38
• Iraq losing Oil Revenues
• The Saudis are sending Oil to US to