X-Industry

The Australian federal government has announced new regulations for telecommunications companies following a massive Optus data breach, which resulted in millions of customers' personal information being accessed.  Under the new regulations, Communications Minister Michelle Rowland said information from affected companies could be shared with financial institutions when required to prevent or respond to cyber security incidents and must then be destroyed.[1]

Here's what we know so far, and what

Activity Summary - Week Ending on 14 October 2022:

• Red Sky Alliance identified 26,570 connections from new IP’s checking in with our Sinkholes
• Netskope IAD hit 56x
• Analysts identified 556 new IP addresses participating in various Botnets
• Bisamware and Chile Locker
• njRat, a.k.a. Bladabindi
• Emotet 2022
• Singtel
• Pinnacle Hack
• Ukraine War
• Optus Part II

Link to full report:  IR-22-288-001_weekly288.pdf

Activity Summary - Week Ending on 30 September 2022:

• Red Sky Alliance identified 31,149 connections from new IP’s checking in with our Sinkholes
• Hetzner in Bavaria Germany hit 28x
• Analysts identified 3,298 new IP addresses participating in various Botnets
• dotCMS Issues
• Meta to the Rescue
• Noberus, aka: BlackCat ALPHV
• Optus
• Industroyer

Link to full report: IR-22-274-001_weekly274.pdf

This past week, the Australian telecoms company Optus is coming under fire for a breach of customer data.  Optus’ initial press release regarding this breach went out on 21 September 2022, informing customers that services were not affected and that they were investigating a possible breach [1].  Optus has subsequently release further updates, including informing customers that they will be contacted if their data was compromised.  In addition, Optus will be offering the Equifax Protect servi