Wednesday, June 19, 2019
Wapack Labs REDXRAY Threat Report (2 companies with new threats)
Information Technology - Midcap
REDXRAY Threat Report
Opera Ltd
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1 Sinkhole Traffic - 0 ThreatRecon Records - 0Power Integrations Inc
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1 Sinkhole Traffic - 0 ThreatRecon Records - 021Vianet Group Inc: No new indicators for this company in the past 24 hours.
2U Inc: No new indicators for this company in the past 24 hours.
3D Systems Corp: No new indicators for this company in the past 24 hours.
8x8 Inc: No new indicators for this company in the past 24 hours.
ADTRAN Inc: No new indicators for this company in the past 24 hours.
AVX Corp.: No new indicators for this company in the past 24 hours.
Acacia Communications Inc: No new indicators for this company in the past 24 hours.
Advanced Energy Industries Inc.: No new indicators for this company in the past 24 hours.
Alarm.com Holdings Inc: No new indicators for this company in the past 24 hours.
Altair Engineering Inc: No new indicators for this company in the past 24 hours.
Ambarella Inc: No new indicators for this company in the past 24 hours.
Amkor Technology Inc: No new indicators for this company in the past 24 hours.
Anixter International Inc: No new indicators for this company in the past 24 hours.
AppFolio Inc: No new indicators for this company in the past 24 hours.
Appian Corp: No new indicators for this company in the past 24 hours.
Au Optronics Corp: No new indicators for this company in the past 24 hours.
Aurora Mobile Ltd: No new indicators for this company in the past 24 hours.
Avaya Holdings Corp: No new indicators for this company in the past 24 hours.
Badger Meter Inc.: No new indicators for this company in the past 24 hours.
Belden Inc: No new indicators for this company in the past 24 hours.
Benchmark Electronics Inc: No new indicators for this company in the past 24 hours.
Benefitfocus Inc: No new indicators for this company in the past 24 hours.
BlackLine Inc: No new indicators for this company in the past 24 hours.
Bottomline Technologies Inc: No new indicators for this company in the past 24 hours.
Box Inc: No new indicators for this company in the past 24 hours.
Brooks Automation Inc: No new indicators for this company in the past 24 hours.
CSG Systems International Inc.: No new indicators for this company in the past 24 hours.
CTS Corp: No new indicators for this company in the past 24 hours.
Cabot Microelectronics Corp: No new indicators for this company in the past 24 hours.
Canadian Solar Inc: No new indicators for this company in the past 24 hours.
Carbon Black Inc: No new indicators for this company in the past 24 hours.
Carbonite Inc: No new indicators for this company in the past 24 hours.
Cardtronics plc: No new indicators for this company in the past 24 hours.
Celestica Inc: No new indicators for this company in the past 24 hours.
Cirrus Logic Inc.: No new indicators for this company in the past 24 hours.
Cision Ltd: No new indicators for this company in the past 24 hours.
Cloudera Inc: No new indicators for this company in the past 24 hours.
Coherent Inc: No new indicators for this company in the past 24 hours.
CommScope Holding Co Inc: No new indicators for this company in the past 24 hours.
CommVault Systems Inc: No new indicators for this company in the past 24 hours.
Computer Services Inc: No new indicators for this company in the past 24 hours.
Conduent Inc: No new indicators for this company in the past 24 hours.
Cornerstone OnDemand Inc: No new indicators for this company in the past 24 hours.
Cray Inc: No new indicators for this company in the past 24 hours.
Descartes Systems Group Inc %28The%29: No new indicators for this company in the past 24 hours.
Diebold Nixdorf Inc: No new indicators for this company in the past 24 hours.
Diodes Inc: No new indicators for this company in the past 24 hours.
Domo Inc: No new indicators for this company in the past 24 hours.
EVERTEC Inc: No new indicators for this company in the past 24 hours.
EVO Payments Inc: No new indicators for this company in the past 24 hours.
Ebix Inc: No new indicators for this company in the past 24 hours.
Electronics for Imaging Inc: No new indicators for this company in the past 24 hours.
Endava plc: No new indicators for this company in the past 24 hours.
Everbridge Inc: No new indicators for this company in the past 24 hours.
ExlService Holdings Inc: No new indicators for this company in the past 24 hours.
FARO Technologies Inc: No new indicators for this company in the past 24 hours.
Fabrinet: No new indicators for this company in the past 24 hours.
Fastly Inc: No new indicators for this company in the past 24 hours.
Finisar Corp: No new indicators for this company in the past 24 hours.
FireEye Inc: No new indicators for this company in the past 24 hours.
Fitbit Inc: No new indicators for this company in the past 24 hours.
Five9 Inc: No new indicators for this company in the past 24 hours.
ForeScout Technologies Inc: No new indicators for this company in the past 24 hours.
FormFactor Inc: No new indicators for this company in the past 24 hours.
GTT Communications Inc: No new indicators for this company in the past 24 hours.
Globant SA: No new indicators for this company in the past 24 hours.
GreenSky Inc: No new indicators for this company in the past 24 hours.
Hollysys Automation Technologies Ltd: No new indicators for this company in the past 24 hours.
II VI Inc: No new indicators for this company in the past 24 hours.
Inphi Corp: No new indicators for this company in the past 24 hours.
Insight Enterprises Inc: No new indicators for this company in the past 24 hours.
Instructure Inc: No new indicators for this company in the past 24 hours.
InterDigital Inc: No new indicators for this company in the past 24 hours.
Itron Inc: No new indicators for this company in the past 24 hours.
JinkoSolar Holding Co Ltd: No new indicators for this company in the past 24 hours.
KBR Inc: No new indicators for this company in the past 24 hours.
KEMET Corp: No new indicators for this company in the past 24 hours.
Knowles Corp: No new indicators for this company in the past 24 hours.
Kulicke and Soffa Industries Inc: No new indicators for this company in the past 24 hours.
Lattice Semiconductor Corp: No new indicators for this company in the past 24 hours.
LivePerson Inc: No new indicators for this company in the past 24 hours.
Luxoft Holding Inc: No new indicators for this company in the past 24 hours.
MACOM Technology Solutions Holdings Inc: No new indicators for this company in the past 24 hours.
MTS Systems Corp: No new indicators for this company in the past 24 hours.
ManTech International Corp: No new indicators for this company in the past 24 hours.
MaxLinear Inc: No new indicators for this company in the past 24 hours.
Methode Electronics Inc: No new indicators for this company in the past 24 hours.
MicroStrategy Inc: No new indicators for this company in the past 24 hours.
Mimecast Ltd: No new indicators for this company in the past 24 hours.
NETGEAR Inc: No new indicators for this company in the past 24 hours.
NIC Inc: No new indicators for this company in the past 24 hours.
Nanometrics Inc: No new indicators for this company in the past 24 hours.
NetScout Systems Inc: No new indicators for this company in the past 24 hours.
Nova Measuring Instruments Ltd: No new indicators for this company in the past 24 hours.
Novanta Inc: No new indicators for this company in the past 24 hours.
OSI Systems Inc: No new indicators for this company in the past 24 hours.
PC Connection Inc: No new indicators for this company in the past 24 hours.
PROS Holdings Inc: No new indicators for this company in the past 24 hours.
PagerDuty Inc: No new indicators for this company in the past 24 hours.
Perficient Inc: No new indicators for this company in the past 24 hours.
Plantronics Inc.: No new indicators for this company in the past 24 hours.
Plexus Corp: No new indicators for this company in the past 24 hours.
Pluralsight Inc: No new indicators for this company in the past 24 hours.
Presidio Inc: No new indicators for this company in the past 24 hours.
Progress Software Corp: No new indicators for this company in the past 24 hours.
Q2 Holdings Inc: No new indicators for this company in the past 24 hours.
QAD Inc: No new indicators for this company in the past 24 hours.
QIWI plc: No new indicators for this company in the past 24 hours.
Quantenna Communications Inc: No new indicators for this company in the past 24 hours.
Radware Ltd: No new indicators for this company in the past 24 hours.
Rambus Inc: No new indicators for this company in the past 24 hours.
Rapid7 Inc: No new indicators for this company in the past 24 hours.
Rogers Corp.: No new indicators for this company in the past 24 hours.
Rudolph Technologies Inc.: No new indicators for this company in the past 24 hours.
SPS Commerce Inc: No new indicators for this company in the past 24 hours.
SailPoint Technologies Holdings Inc: No new indicators for this company in the past 24 hours.
Sanmina Corp: No new indicators for this company in the past 24 hours.
Sapiens International Corp NV: No new indicators for this company in the past 24 hours.
ScanSource Inc: No new indicators for this company in the past 24 hours.
SecureWorks Corp: No new indicators for this company in the past 24 hours.
Semtech Corp: No new indicators for this company in the past 24 hours.
Silicon Motion Technology Corp: No new indicators for this company in the past 24 hours.
SolarEdge Technologies Inc: No new indicators for this company in the past 24 hours.
Stratasys Ltd: No new indicators for this company in the past 24 hours.
SunPower Corp: No new indicators for this company in the past 24 hours.
Svmk Inc: No new indicators for this company in the past 24 hours.
Sykes Enterprises Inc: No new indicators for this company in the past 24 hours.
Synaptics Inc: No new indicators for this company in the past 24 hours.
TTEC Holdings Inc: No new indicators for this company in the past 24 hours.
TTM Technologies Inc: No new indicators for this company in the past 24 hours.
Talend SA: No new indicators for this company in the past 24 hours.
Tenable Holdings Inc: No new indicators for this company in the past 24 hours.
TiVo Corp: No new indicators for this company in the past 24 hours.
Tower Semiconductor Ltd: No new indicators for this company in the past 24 hours.
Upland Software Inc: No new indicators for this company in the past 24 hours.
Varonis Systems Inc: No new indicators for this company in the past 24 hours.
Verra Mobility Corp: No new indicators for this company in the past 24 hours.
Viavi Solutions Inc: No new indicators for this company in the past 24 hours.
Virtusa Corp: No new indicators for this company in the past 24 hours.
Vishay Intertechnology Inc.: No new indicators for this company in the past 24 hours.
WNS %28Holdings%29 Ltd: No new indicators for this company in the past 24 hours.
Workiva Inc: No new indicators for this company in the past 24 hours.
Xperi Corp: No new indicators for this company in the past 24 hours.
Yext Inc: No new indicators for this company in the past 24 hours.
Zuora Inc: No new indicators for this company in the past 24 hours.
ePlus Inc: No new indicators for this company in the past 24 hours.
Wapack Labs REDXRAY Threat Report (8 companies with new threats)
National Defense Transportation
REDXRAY Threat Report
Mac.com
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 25 Sinkhole Traffic - 0 ThreatRecon Records - 0Navy League of the United States
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 50 Sinkhole Traffic - 0 ThreatRecon Records - 0Radiant Global Logistics
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 460 Sinkhole Traffic - 0 ThreatRecon Records - 0USAF AMC/A9
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1246 Sinkhole Traffic - 0 ThreatRecon Records - 0USTRANSCOM
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 36 Sinkhole Traffic - 0 ThreatRecon Records - 0Union Pacific Railroad
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1 Sinkhole Traffic - 0 ThreatRecon Records - 0Verizon.net
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 35 Sinkhole Traffic - 0 ThreatRecon Records - 0Wounded Warrior Project
Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 141 Sinkhole Traffic - 0 ThreatRecon Records - 0What is RedXRay?
RedXray, At-A-Glance Business Risk Management
How do you know if your supplier, customer, partner, member or subsidiary is in cyber trouble? Is your organization at business risk due to unreported cyber threats? What about your subsidiary locations, members or suppliers? Can they recover from the financial losses suffered by a business interruption, financial loss or ransomware? The service notifies you of any threats in your enrolled named entities for any industry segment. For use in supply chains, you can see who is at risk on daily basis and comply with NIST 800-171 rules. There are multiple use applications:
- Banking - monitoring borrowers’ cyber health
- Finance - confirming cyber threats before investing
- Insurance - is your client already in cyber jeopardy
- Auto Dealerships – is your customer private and financial information secure?
- Manufacturing – how secure are you key suppliers and customers?
If a supplier, customer or partner is having cyber issues, you can identify the problem quickly and easily and mitigate losses immediately.
Over the next couple of weeks, we’ll be publishing RedXRay reporting. Reports don’t equal compromise. They show risk. For more information, please call us.
RedXray is offered as a Service Bureau, for pricing and options, please contact Jim McKee jmckee@wapacklabs.com.
Monday, June 17, 2019
Newly Identified Phishing Malware, Allantibots, Can Fool Even The Most Eagle-eyed User.
Apple IDs are a popular target for hackers because they can enable theft of financial data and other personally identifiable information (PII). These are often obtained through phishing campaigns intended to trick users into entering their personal data. In June 2019, Wapack Labs identified one such campaign that is leveraging a large infrastructure and a phishing kit dubbed ‘Allantibots’. Allantibots is a sophisticated phishing package and is characterized by its ability to spoof the Apple URL. This results in a phishing URL that looks completely legitimate, even to a cautious user. To read the article go here: https://redskyalliance.org/finished-analysis/allantibotsTo read the full article and find an archive of related cyber reporting, follow this link to Allantibots Article
Be sure to check out our cyber portal for other related articles Red Sky Alliance.org
Labels:
Allantibots,
apple,
AppleIDs,
CFO,
CISSO,
cyberattack,
financial,
financialreporting,
Hacking,
malware,
Phishing
Monday, June 10, 2019
Wapack Labs Sinkhole Blacklist
Reporting Period:June 20 2019
Wapack Labs identified connections from 72,021 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.
Wapack Labs Keylogger Blacklist
Compromised Email Accounts
Reporting Period: June 20, 2019
Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems.
Thursday, May 23, 2019
Mirai A Self-propagating Mutating Bot Malware
In May 2019, Wapack Labs performed an inventory of recent Mirai specimens on Virus Total. A total of 29K malware specimens were observed during the period spanning from early March to mid-May 2019. A comprehensive indicator list is provided as a companion document to this product.
To read the full article and find an archive of related reporting, follow this link to READBOARD.
WWW.WAPACKLABS.COM
To read the full article and find an archive of related reporting, follow this link to READBOARD.
WWW.WAPACKLABS.COM
Wednesday, May 22, 2019
Wapack Labs Keylogger Blacklist
Compromised Email Accounts
Reporting Period: May 20, 2019
Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems.
Wapack Labs Sinkhole Blacklist
Reporting Period: May 20 2019
Wapack Labs identified connections from 68,359 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.
Thursday, May 16, 2019
LinkedIn, Twitter and Facebook, are not Likely to Survive Russian Internet Isolation Legislation
Social media giants, Twitter and Facebook, are in a legal struggle over previous Russian legislation which requires these companies to store Russian personal data in Russia. Currently, LinkedIn is banned in Russia. On 1 May 2019, Russian President Vladimir Putin signed “Internet sovereignty” bill. Russia will develop its own DNS system to conduct special Internet controls.
To read the full article and find an archive of related reporting, follow this link to READBOARD.
WWW.WAPACKLABS.COM
To read the full article and find an archive of related reporting, follow this link to READBOARD.
WWW.WAPACKLABS.COM
Wapack Labs Sinkhole Blacklist
Reporting Period: May 13 2019
Wapack Labs identified connections from 51,037 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.
Tuesday, May 7, 2019
Remote Desktop Protocol (RDP) a Deep Dive Webinar
Save the Date: Friday Noon EST, May 10th
Click Here to Register
Wapack Labs is excited to invite you to our 2nd Cyber Intelligence on-line Briefings (CIB). This webinar is a deep dive into Remote Desktop Protocol (RDP). Jesse Burke, Advanced Cyber Analyst, will share research on RDP Wrap, Backdoors, Inception, and MiTM. Join our webinar on Friday noon for the webinar and the reports.
Wednesday, May 1, 2019
Wipro Attack Exposes Multiple Targets

In April 2019, Krebs reported that Wipro, an Indian IT outsourcing company, was the victim of a successful cyber attack by suspected state-sponsored actors. The actors leveraged ScreenConnect, a remote administration tool, to gain access to various Wipro systems which were then used as launching points for additional attacks against Wipro’s customers.
To read the full article and find an archive of related reporting, follow this link to READBOARD.
WWW.WAPACKLABS.COM
Wapack Labs Sinkhole Blacklist
Reporting Period: April 29 2019
Wapack Labs identified connections from 53,562 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.
Subscribe to:
Posts (Atom)



