Safe Haven: Perfect Money Iceland

On 29 Nov 2016 Wapack Labs identified several threat actors signing up for Perfect Money Iceland accounts. Perfect Money is an online payment service used to exchange many types of digital and conventional currency between accounts. Wapack Labs has previously assessed Iceland’s potential as a data safe haven. The adoption of the Icelandic version of Perfect Money confirms actors are leveraging those privacy protections to launder the profits of their fraud. Wapack Labs is providing this attacker TTP analysis for your situational awareness.

Publication Date: 1 December 2016
Handling Requirements: Traffic light protocol (TLP) AMBER
Attribution/Threat Actors: Known Hacking Group
Actor Type: Adversary capabilities have been assessed as Tier III
Potential Targets: Worldwide (Financial Institutions)
Past Reporting: DOC-3116,4432

SITREP –RNC Revealed Various Members of the Awakening Media Anarchist Group.

RNC (Republican National Convention) research revealed various members of the Awakening Media anarchist group.  This group links several of the previous names provided by a mid-west police department.  We are providing this information for situational awareness and cross reference.  

OSINT (Open Source Intelligence) collected and reviewed information provided by a mid-west police department regarding possible RNC protest organizers.  The full report includes the gathered information on the protest actors, as well as other information related to the actors and associated groups.  The data in this report is labeled based upon posting date, not date of findings, unless marked otherwise.  This information is being reviewed for situational awareness and event security planning.  Intelligence gaps include whom they are directly recruiting, as well as people with similar interests. Note some names do fall into direct recruitment efforts.

Publication date: 29 June 2016
Handling requirements: Traffic light protocol (TLP) GREEN
Attribution/Threat Actors: OSINT Protest Organizers/Anarchist Group Tier level I for cyber and II for physical.
Potential Targets: City of Cleveland

This report was published in its entirety to the Financial Services ISAC and Red Sky Alliance portal on June 29, 2016.  For more information, contact Wapack Labs at 844-4-WAPACK.