X-Industry

Activity Summary - Week Ending on 14 October 2022:

• Red Sky Alliance identified 26,570 connections from new IP’s checking in with our Sinkholes
• Netskope IAD hit 56x
• Analysts identified 556 new IP addresses participating in various Botnets
• Bisamware and Chile Locker
• njRat, a.k.a. Bladabindi
• Emotet 2022
• Singtel
• Pinnacle Hack
• Ukraine War
• Optus Part II

Link to full report:  IR-22-288-001_weekly288.pdf

Activity Summary - Week Ending on 30 September 2022:

• Red Sky Alliance identified 31,149 connections from new IP’s checking in with our Sinkholes
• Hetzner in Bavaria Germany hit 28x
• Analysts identified 3,298 new IP addresses participating in various Botnets
• dotCMS Issues
• Meta to the Rescue
• Noberus, aka: BlackCat ALPHV
• Optus
• Industroyer

Link to full report: IR-22-274-001_weekly274.pdf

This past week, the Australian telecoms company Optus is coming under fire for a breach of customer data.  Optus’ initial press release regarding this breach went out on 21 September 2022, informing customers that services were not affected and that they were investigating a possible breach [1].  Optus has subsequently release further updates, including informing customers that they will be contacted if their data was compromised.  In addition, Optus will be offering the Equifax Protect servi