Wednesday, June 19, 2019

Wapack Labs REDXRAY Threat Report (1 companies with new threats)

Oil and Gas Suppliers - Mid Market

REDXRAY Threat Report

Schlumberger

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 2 Sinkhole Traffic - 0 ThreatRecon Records - 0

AF Global: No new indicators for this company in the past 24 hours.

ASRC Energy Services: No new indicators for this company in the past 24 hours.

Accenture: No new indicators for this company in the past 24 hours.

Aereon: No new indicators for this company in the past 24 hours.

Affirm Oilfield (a division of Select Energy Services): No new indicators for this company in the past 24 hours.

Alix Partners: No new indicators for this company in the past 24 hours.

All-Pro Fasteners: No new indicators for this company in the past 24 hours.

Allison Transmission: No new indicators for this company in the past 24 hours.

American Block: No new indicators for this company in the past 24 hours.

Apergy: No new indicators for this company in the past 24 hours.

Aries World Wide Logistics: No new indicators for this company in the past 24 hours.

Arnco Technology: No new indicators for this company in the past 24 hours.

Atlas Sand: No new indicators for this company in the past 24 hours.

Auge: No new indicators for this company in the past 24 hours.

Aztec events & tents: No new indicators for this company in the past 24 hours.

B&L Pipeco Services: No new indicators for this company in the past 24 hours.

BJ Services Company USA: No new indicators for this company in the past 24 hours.

Baker Hughes: No new indicators for this company in the past 24 hours.

Basic Energy Services: No new indicators for this company in the past 24 hours.

Bell Supply Company (a division of Endurance Lift Holgings): No new indicators for this company in the past 24 hours.

Big E Drilling (A division of Eastham Forge): No new indicators for this company in the past 24 hours.

Blackhorse Pumps: No new indicators for this company in the past 24 hours.

Brookfield: No new indicators for this company in the past 24 hours.

C&J Energy Services: No new indicators for this company in the past 24 hours.

CDI Energy Products: No new indicators for this company in the past 24 hours.

Camerona Schlumberger Company: No new indicators for this company in the past 24 hours.

Caterpillar Caterpillar Oil &Gas: No new indicators for this company in the past 24 hours.

Clearlake Capital: No new indicators for this company in the past 24 hours.

Covenant Testing Technologies: No new indicators for this company in the past 24 hours.

Credit Suisse: No new indicators for this company in the past 24 hours.

Deloitte: No new indicators for this company in the past 24 hours.

Distrubution Now: No new indicators for this company in the past 24 hours.

Doxsteel Fasterners: No new indicators for this company in the past 24 hours.

Dragon Products: No new indicators for this company in the past 24 hours.

Duff & Phelps: No new indicators for this company in the past 24 hours.

Eastham Forge: No new indicators for this company in the past 24 hours.

Elwood Group, Inc: No new indicators for this company in the past 24 hours.

Endurance Lift Solutions: No new indicators for this company in the past 24 hours.

Energy Alloys: No new indicators for this company in the past 24 hours.

Enventure Global Technology, Inc.,: No new indicators for this company in the past 24 hours.

Exterran: No new indicators for this company in the past 24 hours.

Finkl Steel, Finkl Steel Composite (division of Finkl Steel) , Finkle Steel-Sorel (division of Finkl Steel): No new indicators for this company in the past 24 hours.

First Reserve: No new indicators for this company in the past 24 hours.

Flexitallic Group Inc.: No new indicators for this company in the past 24 hours.

Forged Products, Inc.: No new indicators for this company in the past 24 hours.

Forum Energy Technologies (FET): No new indicators for this company in the past 24 hours.

Fox Metals and Alloys: No new indicators for this company in the past 24 hours.

Frank's International: No new indicators for this company in the past 24 hours.

Freemyer Industrial Pressure: No new indicators for this company in the past 24 hours.

GEO Dynamics (Oil States International, Inc): No new indicators for this company in the past 24 hours.

GR Energy Services: No new indicators for this company in the past 24 hours.

GTUIT: No new indicators for this company in the past 24 hours.

Galtway Industries: No new indicators for this company in the past 24 hours.

Gardner Denver, Inc: No new indicators for this company in the past 24 hours.

Gravity Oilfield Services: No new indicators for this company in the past 24 hours.

Gulf Energy information: No new indicators for this company in the past 24 hours.

HALE Oil & Gas Business Magazine: No new indicators for this company in the past 24 hours.

Halliburton: No new indicators for this company in the past 24 hours.

Hart Energy: No new indicators for this company in the past 24 hours.

Holland 1916: No new indicators for this company in the past 24 hours.

Hoover Ferguson: No new indicators for this company in the past 24 hours.

Hunting Energy Services: No new indicators for this company in the past 24 hours.

Hydrus Technology: No new indicators for this company in the past 24 hours.

Industrial Tax Consulting: No new indicators for this company in the past 24 hours.

InfoChip LP: No new indicators for this company in the past 24 hours.

IronGate Energy Services, LLC: No new indicators for this company in the past 24 hours.

JD Rush Corporation: No new indicators for this company in the past 24 hours.

KLX Energy Services: No new indicators for this company in the past 24 hours.

KW International: No new indicators for this company in the past 24 hours.

Kenewick: No new indicators for this company in the past 24 hours.

Kerr Pumps: No new indicators for this company in the past 24 hours.

Key Energy Services, Inc.: No new indicators for this company in the past 24 hours.

Kimray: No new indicators for this company in the past 24 hours.

Lazard: No new indicators for this company in the past 24 hours.

Li Gear: No new indicators for this company in the past 24 hours.

Lockton Global Energy & Marine: No new indicators for this company in the past 24 hours.

Lone Star Group: No new indicators for this company in the past 24 hours.

Lucchini Mame Forge: No new indicators for this company in the past 24 hours.

M & M International: No new indicators for this company in the past 24 hours.

M&M Forgings: No new indicators for this company in the past 24 hours.

MRC Global: No new indicators for this company in the past 24 hours.

Master Flo Valve (USA) Inc.: No new indicators for this company in the past 24 hours.

McGriff, Seibels & Williams: No new indicators for this company in the past 24 hours.

Minco, Inc.: No new indicators for this company in the past 24 hours.

Mustang Cat: No new indicators for this company in the past 24 hours.

Nabors Drilling Technologies USA: No new indicators for this company in the past 24 hours.

National Oilwell Varco: No new indicators for this company in the past 24 hours.

Newpark Drilling Fluids, LLC: No new indicators for this company in the past 24 hours.

OFS Energy, LLC: No new indicators for this company in the past 24 hours.

Oceaneering International, Inc.: No new indicators for this company in the past 24 hours.

Oil States Energy Services: No new indicators for this company in the past 24 hours.

PPHB: No new indicators for this company in the past 24 hours.

PRT Offshore: No new indicators for this company in the past 24 hours.

PennWell/Oil & Gas Journal: No new indicators for this company in the past 24 hours.

Pink Petro: No new indicators for this company in the past 24 hours.

Pioneer Energy Services: No new indicators for this company in the past 24 hours.

Premier Pipe: No new indicators for this company in the past 24 hours.

Preng & Associates: No new indicators for this company in the past 24 hours.

ProSep: No new indicators for this company in the past 24 hours.

Propell: No new indicators for this company in the past 24 hours.

QES (Quintana Energy Services LP): No new indicators for this company in the past 24 hours.

RPC, Inc: No new indicators for this company in the past 24 hours.

Raymond James & Associates, Inc.: No new indicators for this company in the past 24 hours.

Rubicon Oilfield International: No new indicators for this company in the past 24 hours.

S+S Industries: No new indicators for this company in the past 24 hours.

SCF Partners: No new indicators for this company in the past 24 hours.

SOR, Inc.: No new indicators for this company in the past 24 hours.

Scientific Drilling International, Inc.: No new indicators for this company in the past 24 hours.

Select Energy Serivces, LLC: No new indicators for this company in the past 24 hours.

Sertco industries: No new indicators for this company in the past 24 hours.

Sierra Hamilton: No new indicators for this company in the past 24 hours.

Sigma Fasterners, Inc: No new indicators for this company in the past 24 hours.

Simmons & Company International: No new indicators for this company in the past 24 hours.

Sivalls, Inc.: No new indicators for this company in the past 24 hours.

Smart Sand, Inc.: No new indicators for this company in the past 24 hours.

Solaris Oilfield: No new indicators for this company in the past 24 hours.

Solaris Oilfield Infrastructure: No new indicators for this company in the past 24 hours.

Sooner Pipe, LLC: No new indicators for this company in the past 24 hours.

Southern Stimulation Technologies: No new indicators for this company in the past 24 hours.

Southwest Oilfield Products, Inc.: No new indicators for this company in the past 24 hours.

Spencer Stuart: No new indicators for this company in the past 24 hours.

Spring Bolt and Nut Manufacturing: No new indicators for this company in the past 24 hours.

Stallion Oilfield Services Ltd.: No new indicators for this company in the past 24 hours.

Stream-Flo USA LLC: No new indicators for this company in the past 24 hours.

Stress Engineering Service, Inc.: No new indicators for this company in the past 24 hours.

Sunbelt Steel: No new indicators for this company in the past 24 hours.

Superior Energy: No new indicators for this company in the past 24 hours.

TETRA Technologies, Inc.: No new indicators for this company in the past 24 hours.

TechnipFMC: No new indicators for this company in the past 24 hours.

Teledyne Marine: No new indicators for this company in the past 24 hours.

Trinidad Drilling Ltd.: No new indicators for this company in the past 24 hours.

Tudor, Pickering, Holt & Co.: No new indicators for this company in the past 24 hours.

ValTek Industries, Inc.: No new indicators for this company in the past 24 hours.

Vallourec Drilling USA Corporation, Vallourec Drilling USA Corporation, Vallourec Drilling: No new indicators for this company in the past 24 hours.

Vanguard lab Sciences, LLC: No new indicators for this company in the past 24 hours.

WN Global: No new indicators for this company in the past 24 hours.

Weatherford International Ltd.: No new indicators for this company in the past 24 hours.

Weir Oil & Gas: No new indicators for this company in the past 24 hours.

Wapack Labs REDXRAY Threat Report (2 companies with new threats)

Information Technology - Midcap

REDXRAY Threat Report

Opera Ltd

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1 Sinkhole Traffic - 0 ThreatRecon Records - 0

Power Integrations Inc

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1 Sinkhole Traffic - 0 ThreatRecon Records - 0

21Vianet Group Inc: No new indicators for this company in the past 24 hours.

2U Inc: No new indicators for this company in the past 24 hours.

3D Systems Corp: No new indicators for this company in the past 24 hours.

8x8 Inc: No new indicators for this company in the past 24 hours.

ADTRAN Inc: No new indicators for this company in the past 24 hours.

AVX Corp.: No new indicators for this company in the past 24 hours.

Acacia Communications Inc: No new indicators for this company in the past 24 hours.

Advanced Energy Industries Inc.: No new indicators for this company in the past 24 hours.

Alarm.com Holdings Inc: No new indicators for this company in the past 24 hours.

Altair Engineering Inc: No new indicators for this company in the past 24 hours.

Ambarella Inc: No new indicators for this company in the past 24 hours.

Amkor Technology Inc: No new indicators for this company in the past 24 hours.

Anixter International Inc: No new indicators for this company in the past 24 hours.

AppFolio Inc: No new indicators for this company in the past 24 hours.

Appian Corp: No new indicators for this company in the past 24 hours.

Au Optronics Corp: No new indicators for this company in the past 24 hours.

Aurora Mobile Ltd: No new indicators for this company in the past 24 hours.

Avaya Holdings Corp: No new indicators for this company in the past 24 hours.

Badger Meter Inc.: No new indicators for this company in the past 24 hours.

Belden Inc: No new indicators for this company in the past 24 hours.

Benchmark Electronics Inc: No new indicators for this company in the past 24 hours.

Benefitfocus Inc: No new indicators for this company in the past 24 hours.

BlackLine Inc: No new indicators for this company in the past 24 hours.

Bottomline Technologies Inc: No new indicators for this company in the past 24 hours.

Box Inc: No new indicators for this company in the past 24 hours.

Brooks Automation Inc: No new indicators for this company in the past 24 hours.

CSG Systems International Inc.: No new indicators for this company in the past 24 hours.

CTS Corp: No new indicators for this company in the past 24 hours.

Cabot Microelectronics Corp: No new indicators for this company in the past 24 hours.

Canadian Solar Inc: No new indicators for this company in the past 24 hours.

Carbon Black Inc: No new indicators for this company in the past 24 hours.

Carbonite Inc: No new indicators for this company in the past 24 hours.

Cardtronics plc: No new indicators for this company in the past 24 hours.

Celestica Inc: No new indicators for this company in the past 24 hours.

Cirrus Logic Inc.: No new indicators for this company in the past 24 hours.

Cision Ltd: No new indicators for this company in the past 24 hours.

Cloudera Inc: No new indicators for this company in the past 24 hours.

Coherent Inc: No new indicators for this company in the past 24 hours.

CommScope Holding Co Inc: No new indicators for this company in the past 24 hours.

CommVault Systems Inc: No new indicators for this company in the past 24 hours.

Computer Services Inc: No new indicators for this company in the past 24 hours.

Conduent Inc: No new indicators for this company in the past 24 hours.

Cornerstone OnDemand Inc: No new indicators for this company in the past 24 hours.

Cray Inc: No new indicators for this company in the past 24 hours.

Descartes Systems Group Inc %28The%29: No new indicators for this company in the past 24 hours.

Diebold Nixdorf Inc: No new indicators for this company in the past 24 hours.

Diodes Inc: No new indicators for this company in the past 24 hours.

Domo Inc: No new indicators for this company in the past 24 hours.

EVERTEC Inc: No new indicators for this company in the past 24 hours.

EVO Payments Inc: No new indicators for this company in the past 24 hours.

Ebix Inc: No new indicators for this company in the past 24 hours.

Electronics for Imaging Inc: No new indicators for this company in the past 24 hours.

Endava plc: No new indicators for this company in the past 24 hours.

Everbridge Inc: No new indicators for this company in the past 24 hours.

ExlService Holdings Inc: No new indicators for this company in the past 24 hours.

FARO Technologies Inc: No new indicators for this company in the past 24 hours.

Fabrinet: No new indicators for this company in the past 24 hours.

Fastly Inc: No new indicators for this company in the past 24 hours.

Finisar Corp: No new indicators for this company in the past 24 hours.

FireEye Inc: No new indicators for this company in the past 24 hours.

Fitbit Inc: No new indicators for this company in the past 24 hours.

Five9 Inc: No new indicators for this company in the past 24 hours.

ForeScout Technologies Inc: No new indicators for this company in the past 24 hours.

FormFactor Inc: No new indicators for this company in the past 24 hours.

GTT Communications Inc: No new indicators for this company in the past 24 hours.

Globant SA: No new indicators for this company in the past 24 hours.

GreenSky Inc: No new indicators for this company in the past 24 hours.

Hollysys Automation Technologies Ltd: No new indicators for this company in the past 24 hours.

II VI Inc: No new indicators for this company in the past 24 hours.

Inphi Corp: No new indicators for this company in the past 24 hours.

Insight Enterprises Inc: No new indicators for this company in the past 24 hours.

Instructure Inc: No new indicators for this company in the past 24 hours.

InterDigital Inc: No new indicators for this company in the past 24 hours.

Itron Inc: No new indicators for this company in the past 24 hours.

JinkoSolar Holding Co Ltd: No new indicators for this company in the past 24 hours.

KBR Inc: No new indicators for this company in the past 24 hours.

KEMET Corp: No new indicators for this company in the past 24 hours.

Knowles Corp: No new indicators for this company in the past 24 hours.

Kulicke and Soffa Industries Inc: No new indicators for this company in the past 24 hours.

Lattice Semiconductor Corp: No new indicators for this company in the past 24 hours.

LivePerson Inc: No new indicators for this company in the past 24 hours.

Luxoft Holding Inc: No new indicators for this company in the past 24 hours.

MACOM Technology Solutions Holdings Inc: No new indicators for this company in the past 24 hours.

MTS Systems Corp: No new indicators for this company in the past 24 hours.

ManTech International Corp: No new indicators for this company in the past 24 hours.

MaxLinear Inc: No new indicators for this company in the past 24 hours.

Methode Electronics Inc: No new indicators for this company in the past 24 hours.

MicroStrategy Inc: No new indicators for this company in the past 24 hours.

Mimecast Ltd: No new indicators for this company in the past 24 hours.

NETGEAR Inc: No new indicators for this company in the past 24 hours.

NIC Inc: No new indicators for this company in the past 24 hours.

Nanometrics Inc: No new indicators for this company in the past 24 hours.

NetScout Systems Inc: No new indicators for this company in the past 24 hours.

Nova Measuring Instruments Ltd: No new indicators for this company in the past 24 hours.

Novanta Inc: No new indicators for this company in the past 24 hours.

OSI Systems Inc: No new indicators for this company in the past 24 hours.

PC Connection Inc: No new indicators for this company in the past 24 hours.

PROS Holdings Inc: No new indicators for this company in the past 24 hours.

PagerDuty Inc: No new indicators for this company in the past 24 hours.

Perficient Inc: No new indicators for this company in the past 24 hours.

Plantronics Inc.: No new indicators for this company in the past 24 hours.

Plexus Corp: No new indicators for this company in the past 24 hours.

Pluralsight Inc: No new indicators for this company in the past 24 hours.

Presidio Inc: No new indicators for this company in the past 24 hours.

Progress Software Corp: No new indicators for this company in the past 24 hours.

Q2 Holdings Inc: No new indicators for this company in the past 24 hours.

QAD Inc: No new indicators for this company in the past 24 hours.

QIWI plc: No new indicators for this company in the past 24 hours.

Quantenna Communications Inc: No new indicators for this company in the past 24 hours.

Radware Ltd: No new indicators for this company in the past 24 hours.

Rambus Inc: No new indicators for this company in the past 24 hours.

Rapid7 Inc: No new indicators for this company in the past 24 hours.

Rogers Corp.: No new indicators for this company in the past 24 hours.

Rudolph Technologies Inc.: No new indicators for this company in the past 24 hours.

SPS Commerce Inc: No new indicators for this company in the past 24 hours.

SailPoint Technologies Holdings Inc: No new indicators for this company in the past 24 hours.

Sanmina Corp: No new indicators for this company in the past 24 hours.

Sapiens International Corp NV: No new indicators for this company in the past 24 hours.

ScanSource Inc: No new indicators for this company in the past 24 hours.

SecureWorks Corp: No new indicators for this company in the past 24 hours.

Semtech Corp: No new indicators for this company in the past 24 hours.

Silicon Motion Technology Corp: No new indicators for this company in the past 24 hours.

SolarEdge Technologies Inc: No new indicators for this company in the past 24 hours.

Stratasys Ltd: No new indicators for this company in the past 24 hours.

SunPower Corp: No new indicators for this company in the past 24 hours.

Svmk Inc: No new indicators for this company in the past 24 hours.

Sykes Enterprises Inc: No new indicators for this company in the past 24 hours.

Synaptics Inc: No new indicators for this company in the past 24 hours.

TTEC Holdings Inc: No new indicators for this company in the past 24 hours.

TTM Technologies Inc: No new indicators for this company in the past 24 hours.

Talend SA: No new indicators for this company in the past 24 hours.

Tenable Holdings Inc: No new indicators for this company in the past 24 hours.

TiVo Corp: No new indicators for this company in the past 24 hours.

Tower Semiconductor Ltd: No new indicators for this company in the past 24 hours.

Upland Software Inc: No new indicators for this company in the past 24 hours.

Varonis Systems Inc: No new indicators for this company in the past 24 hours.

Verra Mobility Corp: No new indicators for this company in the past 24 hours.

Viavi Solutions Inc: No new indicators for this company in the past 24 hours.

Virtusa Corp: No new indicators for this company in the past 24 hours.

Vishay Intertechnology Inc.: No new indicators for this company in the past 24 hours.

WNS %28Holdings%29 Ltd: No new indicators for this company in the past 24 hours.

Workiva Inc: No new indicators for this company in the past 24 hours.

Xperi Corp: No new indicators for this company in the past 24 hours.

Yext Inc: No new indicators for this company in the past 24 hours.

Zuora Inc: No new indicators for this company in the past 24 hours.

ePlus Inc: No new indicators for this company in the past 24 hours.

Wapack Labs REDXRAY Threat Report (8 companies with new threats)

National Defense Transportation

REDXRAY Threat Report

Mac.com

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 25 Sinkhole Traffic - 0 ThreatRecon Records - 0

Navy League of the United States

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 50 Sinkhole Traffic - 0 ThreatRecon Records - 0

Radiant Global Logistics

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 460 Sinkhole Traffic - 0 ThreatRecon Records - 0

USAF AMC/A9

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1246 Sinkhole Traffic - 0 ThreatRecon Records - 0

USTRANSCOM

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 36 Sinkhole Traffic - 0 ThreatRecon Records - 0

Union Pacific Railroad

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 1 Sinkhole Traffic - 0 ThreatRecon Records - 0

Verizon.net

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 35 Sinkhole Traffic - 0 ThreatRecon Records - 0

Wounded Warrior Project

Botnet Tracker - 0 Breach Data - 0 Keylogger Records - 0 Malicious Emails - 0 Malicious Emails Context- 0 Malicious Email Detections- 0 Pastebin - 141 Sinkhole Traffic - 0 ThreatRecon Records - 0


What is RedXRay?

RedXray, At-A-Glance Business Risk Management

How do you know if your supplier, customer, partner, member or subsidiary is in cyber trouble? Is your organization at business risk due to unreported cyber threats? What about your subsidiary locations, members or suppliers? Can they recover from the financial losses suffered by a business interruption, financial loss or ransomware? The service notifies you of any threats in your enrolled named entities for any industry segment. For use in supply chains, you can see who is at risk on daily basis and comply with NIST 800-171 rules. There are multiple use applications:
  • Banking - monitoring borrowers’ cyber health
  • Finance - confirming cyber threats before investing
  • Insurance - is your client already in cyber jeopardy
  • Auto Dealerships – is your customer private and financial information secure?
  • Manufacturing – how secure are you key suppliers and customers?
If a supplier, customer or partner is having cyber issues, you can identify the problem quickly and easily and mitigate losses immediately.

Over the next couple of weeks, we’ll be publishing RedXRay reporting. Reports don’t equal compromise. They show risk. For more information, please call us.

RedXray is offered as a Service Bureau, for pricing and options, please contact Jim McKee jmckee@wapacklabs.com.

Monday, June 17, 2019

Newly Identified Phishing Malware, Allantibots, Can Fool Even The Most Eagle-eyed User.

Apple IDs are a popular target for hackers because they can enable theft of financial data and other personally identifiable information (PII). These are often obtained through phishing campaigns intended to trick users into entering their personal data. In June 2019, Wapack Labs identified one such campaign that is leveraging a large infrastructure and a phishing kit dubbed ‘Allantibots’. Allantibots is a sophisticated phishing package and is characterized by its ability to spoof the Apple URL. This results in a phishing URL that looks completely legitimate, even to a cautious user. To read the article go here: https://redskyalliance.org/finished-analysis/allantibots

To read the full article and find an archive of related cyber reporting, follow this link to  Allantibots Article 

Be sure to check out our cyber portal for other related articles Red Sky Alliance.org

Monday, June 10, 2019

Wapack Labs Sinkhole Blacklist

TLP AMBER ANNOUNCEMENT:   
Reporting Period:June 20 2019

Wapack Labs identified connections from 72,021 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems. 

Wapack Labs Keylogger Blacklist

TLP AMBER ANNOUNCEMENT:
Compromised Email Accounts
Reporting Period: June 20, 2019 

On 20 June 2019, Wapack Labs identified 95 unique email accounts compromised with keyloggers and used to log into mostly personal accounts and organizations. Attackers may be able to access not only email addresses but also financial, social media and other data.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com 

Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems. 

Thursday, May 23, 2019

Mirai A Self-propagating Mutating Bot Malware

In May 2019, Wapack Labs performed an inventory of recent Mirai specimens on Virus Total. A total of 29K malware specimens were observed during the period spanning from early March to mid-May 2019. A comprehensive indicator list is provided as a companion document to this product.

To read the full article and find an archive of related reporting, follow this link to READBOARD.

WWW.WAPACKLABS.COM

Wednesday, May 22, 2019

Wapack Labs Keylogger Blacklist

TLP AMBER ANNOUNCEMENT:
Compromised Email Accounts
Reporting Period: May 20, 2019 

On 20 May 2019, Wapack Labs identified 28 unique email accounts compromised with keyloggers and used to log into mostly personal accounts and organizations. Attackers may be able to access not only email addresses but also financial, social media and other data.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com 

Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems. 

Wapack Labs Sinkhole Blacklist

LP AMBER ANNOUNCEMENT:   
Reporting Period: May 20 2019

Wapack Labs identified connections from 68,359 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems. 

Thursday, May 16, 2019

LinkedIn, Twitter and Facebook, are not Likely to Survive Russian Internet Isolation Legislation

Social media giants, Twitter and Facebook, are in a legal struggle over previous Russian legislation which requires these companies to store Russian personal data in Russia. Currently, LinkedIn is banned in Russia. On 1 May 2019, Russian President Vladimir Putin signed “Internet sovereignty” bill.  Russia will develop its own DNS system to conduct special Internet controls. 

To read the full article and find an archive of related reporting, follow this link to READBOARD.

WWW.WAPACKLABS.COM

Wapack Labs Sinkhole Blacklist

LP AMBER ANNOUNCEMENT:   
Reporting Period: May 13 2019

Wapack Labs identified connections from 51,037 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems. 

Tuesday, May 7, 2019

Remote Desktop Protocol (RDP) a Deep Dive Webinar


Save the Date: Friday Noon EST, May 10th 
Click Here to Register

Wapack Labs is excited to invite you to our 2nd Cyber Intelligence on-line Briefings (CIB). This webinar is a deep dive into Remote Desktop Protocol (RDP). Jesse Burke, Advanced Cyber Analyst, will share research on RDP Wrap, Backdoors, Inception, and MiTM. Join our webinar on Friday noon for the webinar and the reports.

Wednesday, May 1, 2019

Wipro Attack Exposes Multiple Targets


In April 2019, Krebs reported that Wipro, an Indian IT outsourcing company, was the victim of a successful cyber attack by suspected state-sponsored actors. The actors leveraged ScreenConnect, a remote administration tool, to gain access to various Wipro systems which were then used as launching points for additional attacks against Wipro’s customers.

To read the full article and find an archive of related reporting, follow this link to READBOARD.

WWW.WAPACKLABS.COM

Wapack Labs Sinkhole Blacklist

LP AMBER ANNOUNCEMENT:   
Reporting Period: April 29 2019

Wapack Labs identified connections from 53,562 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.