X-Industry

ONUS, the Vietnamese crypto trading platform, recently experienced an attack stemming from the Log4j vulnerability (CVE-2021-44228).[1] ONUS allows users to trade crypto currencies through their app which is available for iOS and Android. The organization has grown significantly in the past 18 months since the app’s launch in March of 2020, with a large portion of users in Vietnam, Nigeria, and the Philippines.[2]

Financial organizations and crypto platforms in particular are juicy targets for a

Activity Summary - Week Ending on 7 January 2022:

• Red Sky Alliance identified 25,112 connections from new IP’s checking in with our Sinkholes
• 227.12[.]174 x 182
• Analysts identified 1,148 new IP addresses participating in various Botnets
• (5) Ransomware Attack Techniques
• CVE-2021-42278 and CVE-2021-42287
• Lapsus$
• Omicrom Scams
• ONUS Attacked by a Log4j Version
• Insider Threats
• Walmart, Part II
• Sunrise Movement

Link to full report: IR-22-007-001_weekly007.pdf