X-Industry

US Atlanta based Colonial Pipeline Company said in a statement last Friday that it was the victim of a cybersecurity attack, and so "proactively took certain systems offline to contain the threat, which has temporarily halted all pipeline operations, and affected some of our IT systems."  An updated statement over the weekend it said it had "determined that this incident involves ransomware."

A former U.S. official and two industry sources have told media that the group DarkSide is among the sus

Activity Summary - Week Ending 7 May 2021:

• Taleq Simeon needs a new Email Address
• Red Sky Alliance identified 15,654 connections from new unique IP Addresses
• Analysts identified 1,209 new IP addresses participating in various Botnets
• Researchers observed 20 unique email accounts compromised with Keyloggers
• FormBook Variant – Part III
• Google Play Store
• Oil and Gas getting SMART
• Oil and Gas on the Rise, Finally
• Cyber-Attack on Oil and Gas to ‘continue’ Rise
• Angola’s National Oil, Gas and Biofuel’

Activity Summary - Week Ending 9 October 2020:

• Red Sky Alliance analysts identified 2,258 new IP addresses participating in various Botnets
• Analysts observed 28 unique email accounts compromised with keyloggers
• Red Sky Alliance identified 45,867 connections from new unique IP addresses
• Finspy Malware Part 2
• MoDi RAT Leverages OneDrive Cloud Storage
• Microsoft DDR
• Nobel and Chevron
• Denmark and Nord Stream 2
• Russia ups oil Output
• Armenia and Azerbaijan still at it, compromising oil pipelines
• Norwa

Activity Summary - Week Ending 25 September 2020:

• Analysts identified 3,021 new IP addresses participating in various Botnets
• Red Sky Alliance observed 56 unique email accounts compromised with Keyloggers
• RSAC identified 46,283 connections from new unique IP addresses
• Winnti Group and the Shadowpad Backdoor
• Baka JavaScript Skimmer Stealing Credit Card Data
• Zap Energy – Zapped
• OIL / GAS vs. Renewable Energy
• $40.00 a Barrel, Stagnant + -
• Libya pumping Oil
• ReconAfrica targeted by Environmentalists

Activity Summary - Week Ending 11 September 2020:

• Red Sky Alliance observed 97 unique email accounts compromised with Keyloggers
• Analysts identified 69,770 connections from new unique IP addresses
• The BeagleBoyz are robbing Banks
• Analysts identified 4,775 new IP addresses participating in various Botnets
• Box Pages Utilized in Phishing Attacks
• Netwalker Ransomware in Argentina
• Oil Prices in a new “Supercycle”
• Iranian tankers possibly heading to Venezuela in defiance of US sanctions
• Germany – Nor

Activity Summary - Week Ending 28 August 2020:

• Fairdeal Furniture LTD, located in Mombasa Kenya is still Keylogged
• Red Sky Alliance observed 26 unique email accounts compromised with Keyloggers
• Analysts identified 68,495 connections from new unique IP addresses
• Red Sky Alliance identified 3,148 new IP addresses participating in various Botnets
• Team TNT targeting AWS using Kinsing variant
• Maze Ransomware
• US SBA Loan Relief Phishing Campaign
• Oil prices remain somewhat stagnant – even with Hurrica

Activity Summary - Week Ending 21 August 2020:

• Red Sky Alliance observed 15 unique email accounts compromised with Keyloggers
• Videoholka still is Keylogged
• Analysts identified 47, 658 connections from new unique IP addresses
• 3,294 new IP addresses participating in various Botnets
• Drovorub Malware Exposed
• FritzFrog P2P botnet struck at least 500 government and enterprise SSH servers
• COVID-19 Variants
• Magecart Group 8
• Oil Prices stuck in the $40-$45 Range
• Petrobas and Microsoft working together f

Activity Summary - Week Ending 17 July 2020:

• Red Sky Alliance identified 57,886 connections from new unique IP addresses
• Analysts identified 3,052 new IP addresses participating in various Botnets
• Buffalo Vastitude is Compromised
• ShinyHunters is on the Top 5 Threat Actor List
• Thanos Ransomware
• OT Ransomware Ekans
• Outlaw Botnet
• Oil Prices remain around the low $40 a barrel
• Oil Merchant Tanker hiding in Iran waters
• UK cuts ties with Huawei, China not Happy
• Libya’s eastern government asking Egypt

Activity Summary - Week Ending 22 May 2020:

• Red Sky Alliance observed 68 unique email accounts compromised with Keyloggers
• Analysts identified 53,148 connections from new unique IP addresses
• MinaOTP and Lazarus
• EVILNUM
• OPEC+ Cuts appear to be Working
• Angola’s Oil Production comes to a Halt
• More Nord Stream 2 legal action in Europe
• Oil Prices continue an Up-hill, See-Saw Climb
• Iran sending Crude Oil to Venezuela, both defying Sanctions
• The Oil Rich South China Sea still in Dispute
• Greta wins a W

- Red Sky Alliance identified 73,420 connections from new unique IP addresses
- Analysts identified 4,896 new IP addresses participating in various Botnets
- Hoe Hin & Sons, a Malaysian Yamaha Distributorship Keylogged
- Rx and BioChem Companies being Targeted, Hmmmmm…..Anyone Wonder Why?
- APT41 (Winnti) Attack with New Variant
- PoetRAT: Python RAT
- Oil Supply Chain
- Oil rich Libya still in Flux
- Russia planning to cut Oil exports from its Baltic and Black Sea ports
- PEMEX in the middle of Oil Deb

Activity Summary - Week Ending 10 April 2020:

• Red Sky Alliance identified 52,538 connections from new unique IP addresses
• Who’s Faru Potter? Well, he’s pwned
• APT32, Bitter APT and Kimsuky group taking advantage of the COVID-19 pandemic
• "New" Crown Pneumonia Ransomware, dusted off and Operable
• Firefox Browser Zero-Day Vulnerabilities - Extended Support Release 68.6.1 – fix ASAP
• 3M on hackers Radar Screen, Again
• Brent crude up to $33.38
• Iraq losing Oil Revenues
• The Saudis are sending Oil to US to