Activity Summary - Week Ending on 7 January 2022:
- Red Sky Alliance identified 25,112 connections from new IP’s checking in with our Sinkholes
- 227.12[.]174 x 182
- Analysts identified 1,148 new IP addresses participating in various Botnets
- (5) Ransomware Attack Techniques
- CVE-2021-42278 and CVE-2021-42287
- Lapsus$
- Omicrom Scams
- ONUS Attacked by a Log4j Version
- Insider Threats
- Walmart, Part II
- Sunrise Movement
Link to full report: IR-22-007-001_weekly007.pdf