Thursday, August 8, 2019

Wapack Labs REDXRAY Threat Report (8 companies with new threats)

Oil and Gas Suppliers - Mid Market

REDXRAY Threat Report

All hits in this notification should be investigated by an analyst before being actioned or blocked. For more information, please contact Wapack Labs at 888-733-9729.

Accenture

Botnet Tracker - 0 Breach Data - 12 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

Baker Hughes

Botnet Tracker - 0 Breach Data - 46 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

Caterpillar Caterpillar Oil &Gas

Botnet Tracker - 0 Breach Data - 20 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

Deloitte

Botnet Tracker - 0 Breach Data - 2 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

Halliburton

Botnet Tracker - 0 Breach Data - 2 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

National Oilwell Varco

Botnet Tracker - 0 Breach Data - 4 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

Oceaneering International, Inc.

Botnet Tracker - 0 Breach Data - 2 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 0 Sinkhole Traffic - 0 ThreatRecon Records - 0

Schlumberger

Botnet Tracker - 0 Breach Data - 6 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 2 Sinkhole Traffic - 0 ThreatRecon Records - 0

AF Global: No new indicators for this company in the past 24 hours.

ASRC Energy Services: No new indicators for this company in the past 24 hours.

Aereon: No new indicators for this company in the past 24 hours.

Affirm Oilfield (a division of Select Energy Services): No new indicators for this company in the past 24 hours.

Alix Partners: No new indicators for this company in the past 24 hours.

All-Pro Fasteners: No new indicators for this company in the past 24 hours.

Allison Transmission: No new indicators for this company in the past 24 hours.

American Block: No new indicators for this company in the past 24 hours.

Apergy: No new indicators for this company in the past 24 hours.

Aries World Wide Logistics: No new indicators for this company in the past 24 hours.

Arnco Technology: No new indicators for this company in the past 24 hours.

Atlas Sand: No new indicators for this company in the past 24 hours.

Auge: No new indicators for this company in the past 24 hours.

Aztec events & tents: No new indicators for this company in the past 24 hours.

B&L Pipeco Services: No new indicators for this company in the past 24 hours.

BJ Services Company USA: No new indicators for this company in the past 24 hours.

Basic Energy Services: No new indicators for this company in the past 24 hours.

Bell Supply Company (a division of Endurance Lift Holgings): No new indicators for this company in the past 24 hours.

Big E Drilling (A division of Eastham Forge): No new indicators for this company in the past 24 hours.

Blackhorse Pumps: No new indicators for this company in the past 24 hours.

Brookfield: No new indicators for this company in the past 24 hours.

C&J Energy Services: No new indicators for this company in the past 24 hours.

CDI Energy Products: No new indicators for this company in the past 24 hours.

Camerona Schlumberger Company: No new indicators for this company in the past 24 hours.

Clearlake Capital: No new indicators for this company in the past 24 hours.

Covenant Testing Technologies: No new indicators for this company in the past 24 hours.

Credit Suisse: No new indicators for this company in the past 24 hours.

Distrubution Now: No new indicators for this company in the past 24 hours.

Doxsteel Fasterners: No new indicators for this company in the past 24 hours.

Dragon Products: No new indicators for this company in the past 24 hours.

Duff & Phelps: No new indicators for this company in the past 24 hours.

Eastham Forge: No new indicators for this company in the past 24 hours.

Elwood Group, Inc: No new indicators for this company in the past 24 hours.

Endurance Lift Solutions: No new indicators for this company in the past 24 hours.

Energy Alloys: No new indicators for this company in the past 24 hours.

Enventure Global Technology, Inc.,: No new indicators for this company in the past 24 hours.

Exterran: No new indicators for this company in the past 24 hours.

Finkl Steel, Finkl Steel Composite (division of Finkl Steel) , Finkle Steel-Sorel (division of Finkl Steel): No new indicators for this company in the past 24 hours.

First Reserve: No new indicators for this company in the past 24 hours.

Flexitallic Group Inc.: No new indicators for this company in the past 24 hours.

Forged Products, Inc.: No new indicators for this company in the past 24 hours.

Forum Energy Technologies (FET): No new indicators for this company in the past 24 hours.

Fox Metals and Alloys: No new indicators for this company in the past 24 hours.

Frank's International: No new indicators for this company in the past 24 hours.

Freemyer Industrial Pressure: No new indicators for this company in the past 24 hours.

GEO Dynamics (Oil States International, Inc): No new indicators for this company in the past 24 hours.

GR Energy Services: No new indicators for this company in the past 24 hours.

GTUIT: No new indicators for this company in the past 24 hours.

Galtway Industries: No new indicators for this company in the past 24 hours.

Gardner Denver, Inc: No new indicators for this company in the past 24 hours.

Gravity Oilfield Services: No new indicators for this company in the past 24 hours.

Gulf Energy information: No new indicators for this company in the past 24 hours.

HALE Oil & Gas Business Magazine: No new indicators for this company in the past 24 hours.

Hart Energy: No new indicators for this company in the past 24 hours.

Holland 1916: No new indicators for this company in the past 24 hours.

Hoover Ferguson: No new indicators for this company in the past 24 hours.

Hunting Energy Services: No new indicators for this company in the past 24 hours.

Hydrus Technology: No new indicators for this company in the past 24 hours.

Industrial Tax Consulting: No new indicators for this company in the past 24 hours.

InfoChip LP: No new indicators for this company in the past 24 hours.

IronGate Energy Services, LLC: No new indicators for this company in the past 24 hours.

JD Rush Corporation: No new indicators for this company in the past 24 hours.

KLX Energy Services: No new indicators for this company in the past 24 hours.

KW International: No new indicators for this company in the past 24 hours.

Kenewick: No new indicators for this company in the past 24 hours.

Kerr Pumps: No new indicators for this company in the past 24 hours.

Key Energy Services, Inc.: No new indicators for this company in the past 24 hours.

Kimray: No new indicators for this company in the past 24 hours.

Lazard: No new indicators for this company in the past 24 hours.

Li Gear: No new indicators for this company in the past 24 hours.

Lockton Global Energy & Marine: No new indicators for this company in the past 24 hours.

Lone Star Group: No new indicators for this company in the past 24 hours.

Lucchini Mame Forge: No new indicators for this company in the past 24 hours.

M & M International: No new indicators for this company in the past 24 hours.

M&M Forgings: No new indicators for this company in the past 24 hours.

MRC Global: No new indicators for this company in the past 24 hours.

Master Flo Valve (USA) Inc.: No new indicators for this company in the past 24 hours.

McGriff, Seibels & Williams: No new indicators for this company in the past 24 hours.

Minco, Inc.: No new indicators for this company in the past 24 hours.

Mustang Cat: No new indicators for this company in the past 24 hours.

Nabors Drilling Technologies USA: No new indicators for this company in the past 24 hours.

Newpark Drilling Fluids, LLC: No new indicators for this company in the past 24 hours.

OFS Energy, LLC: No new indicators for this company in the past 24 hours.

Oil States Energy Services: No new indicators for this company in the past 24 hours.

PPHB: No new indicators for this company in the past 24 hours.

PRT Offshore: No new indicators for this company in the past 24 hours.

PennWell/Oil & Gas Journal: No new indicators for this company in the past 24 hours.

Pink Petro: No new indicators for this company in the past 24 hours.

Pioneer Energy Services: No new indicators for this company in the past 24 hours.

Premier Pipe: No new indicators for this company in the past 24 hours.

Preng & Associates: No new indicators for this company in the past 24 hours.

ProSep: No new indicators for this company in the past 24 hours.

Propell: No new indicators for this company in the past 24 hours.

QES (Quintana Energy Services LP): No new indicators for this company in the past 24 hours.

RPC, Inc: No new indicators for this company in the past 24 hours.

Raymond James & Associates, Inc.: No new indicators for this company in the past 24 hours.

Rubicon Oilfield International: No new indicators for this company in the past 24 hours.

S+S Industries: No new indicators for this company in the past 24 hours.

SCF Partners: No new indicators for this company in the past 24 hours.

SOR, Inc.: No new indicators for this company in the past 24 hours.

Scientific Drilling International, Inc.: No new indicators for this company in the past 24 hours.

Select Energy Serivces, LLC: No new indicators for this company in the past 24 hours.

Sertco industries: No new indicators for this company in the past 24 hours.

Sierra Hamilton: No new indicators for this company in the past 24 hours.

Sigma Fasterners, Inc: No new indicators for this company in the past 24 hours.

Simmons & Company International: No new indicators for this company in the past 24 hours.

Sivalls, Inc.: No new indicators for this company in the past 24 hours.

Smart Sand, Inc.: No new indicators for this company in the past 24 hours.

Solaris Oilfield: No new indicators for this company in the past 24 hours.

Solaris Oilfield Infrastructure: No new indicators for this company in the past 24 hours.

Sooner Pipe, LLC: No new indicators for this company in the past 24 hours.

Southern Stimulation Technologies: No new indicators for this company in the past 24 hours.

Southwest Oilfield Products, Inc.: No new indicators for this company in the past 24 hours.

Spencer Stuart: No new indicators for this company in the past 24 hours.

Spring Bolt and Nut Manufacturing: No new indicators for this company in the past 24 hours.

Stallion Oilfield Services Ltd.: No new indicators for this company in the past 24 hours.

Stream-Flo USA LLC: No new indicators for this company in the past 24 hours.

Stress Engineering Service, Inc.: No new indicators for this company in the past 24 hours.

Sunbelt Steel: No new indicators for this company in the past 24 hours.

Superior Energy: No new indicators for this company in the past 24 hours.

TETRA Technologies, Inc.: No new indicators for this company in the past 24 hours.

TechnipFMC: No new indicators for this company in the past 24 hours.

Teledyne Marine: No new indicators for this company in the past 24 hours.

Trinidad Drilling Ltd.: No new indicators for this company in the past 24 hours.

Tudor, Pickering, Holt & Co.: No new indicators for this company in the past 24 hours.

ValTek Industries, Inc.: No new indicators for this company in the past 24 hours.

Vallourec Drilling USA Corporation, Vallourec Drilling USA Corporation, Vallourec Drilling: No new indicators for this company in the past 24 hours.

Vanguard lab Sciences, LLC: No new indicators for this company in the past 24 hours.

WN Global: No new indicators for this company in the past 24 hours.

Weatherford International Ltd.: No new indicators for this company in the past 24 hours.

Weir Oil & Gas: No new indicators for this company in the past 24 hours.


Botnet_tracker

If your IP address is found in botnet tracker, it means that it was seen in a communication with a malicious endpoint. This does not automatically indicate a malware infection as there are a number of reasons why two IP addresses might communicate. The traffic should first be inspected before escalating to incident responders.

Keylogger

A keylogger hit means your domain or IP address appeared in a keylogger output file. This would mean one of the following things: 1) A keylogger malware is running on your network. 2) A username and password belonging to an employee was captured by a keylogger. 3) An email address was observed in clipboard data on an infected computer. For example somebody cut and paste an email address belonging to your organization. The raw source data must first be investigated to determine course of action.

Malicious Emails

If your domain or IP address shows up in this collection, it means it was observed in the header of an email that has been identified as malicious (1 or more AV detection). The raw email should be inspected to see whether it was sent to or from your organization, or if it was spoofed using your organizations data. It should be noted that some AV vendors classify emails as malicious when they are actually benign. All malicious emails hits only indicate targeting, not malware infections.

Pastebin

A pastebin hit simply means your information was observed in a paste on pastebin.com. There are numerous reasons information would be contained in a paste – some malicious and some benign. Each pastebin hit must be individually analyzed to determine context.

Sinkhole data

A sinkhole hit means your IP was observed in weblogs from our sinkhole server. Similar to the botnet_tracker hits, it only means that communication was observed. The nature of that communication needs to be determined from the raw sinkhole record. If the sinkhole hit is a result of a malware infection, then the information should be referred to incident responders.

Breach Data

Breach data hits are from public database leaks. Depending on the nature of the leaked database, exposed information may vary from just email addresses, to username and password combinations and other personally identifiable information. RedXray contains the raw breach data so you can easily see what type of data has been exposed. If the breach data contains passwords then Wapack Labs recommends enforcing a password reset and investigating whether there has been unauthorized access of the account.

Threat Recon

Threat recon consists of both primary sourced indicators and open sourced indicators from dozens of sources. Each hit from this collection should be individually analyzed as each source has different context. Threat recon records contain references to the original source.