Tuesday, October 13, 2020

REDSHORT Webinar: Palmerworm APT Group

October 14th, at 9:30AM EST

Welcome

Registration

Please join us for our next REDSHORT webinar. 'RED' as in something important from Red Sky Alliance and 'SHORT' as in, once a week in 10 minutes or less. The webinar will be a summary of the current week's topic and will include a link to an in-depth report.

Palmerworm APT Group

Registration

This week's REDSHORT is on the Palmerworm APT Group. Active since 2013, has been observed targeting companies in Japan, China, Taiwan, and the United States. As opposed to ransomware criminal groups, these actors appear to be focused on committing espionage. The APT group has been seen using custom malware, along with known exploits to target its victims.  Join us on our webinar to find out more.



Tuesday, August 4, 2020

WEBINAR REMINDER - 79 Netgear Router Models Are Vulnerable to Malicious HTTP Requests.

REMINDER - RED SKY ALLIANCE WEDNESDAY MORNING LIVE CYBER BRIEF WEBINAR August 5th, 2020 at 9:30 EST  

https://attendee.gotowebinar.com/register/8782169210544615949  TOP TOPIC: 79 Netgear Router Models Are Vulnerable to Malicious HTTP Requests. In January, Netgear was alerted about remote code execution vulnerability in 79 models of their routers. Netgear issued hotfixes for 34 of them, but the majority of the models will never be secured. Netgear refers to “outside security support period” reasoning, but some of the 'forever vulnerable' models are still available in retail. Join us and find out more

Wednesday, June 3, 2020

Red Sky® Alliance Integrates Ransomware Protection Into RedXray® Service

“By embedding Ransomware Protection in its already robust RedXray® product, Red Sky® Alliance is helping its customers drive proactive, holistic cyber risk management,” said Kirsten Bay, CEO and Co-Founder of Cysurance – which provides the Ransomware Protection and cyber insurance policies and leverages blockchain technology and smart contracts to improve claim outcomes. “This new offering provides added resiliency in this time of heightened cyber risk from remote workforces and COVID-related phishing attacks.” To read the full News Release follow the link.

Tuesday, February 11, 2020

CYSURANCE & RED SKY ALLIANCE TEAM UP TO DELIVER BUNDLED CYBER THREAT INTELLIGENCE & CYBER INSURANCE

New York, February 11, 2020 – Cysurance, LLC, a next-generation cyber insurance agency protecting small businesses and their partners through affordable cyber insurance, and Red Sky Alliance, a cyber threat intelligence firm delivering actionable data and analysis, today announced a new partnership to provide cyber risk management services to businesses. To read the full News Release follow the link.

Tuesday, December 10, 2019

Wapack Labs Sinkhole Blacklist

TLP AMBER ANNOUNCEMENT:   

Reporting Period: December 9, 2019

Wapack Labs identified connections from 32,333 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems. 

Wapack Labs Keylogger Blacklist

TLP AMBER ANNOUNCEMENT:

Compromised Email Accounts
Reporting Period: December 9, 2019 

On 9 December 2019, Wapack Labs identified 13 unique email accounts compromised with keyloggers and used to log into mostly personal accounts and organizations. Attackers may be able to access not only email addresses but also financial, social media and other data.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com 

Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems. 

Wednesday, November 27, 2019

GRF Partners with Red Sky Alliance to Offer Bespoke Threat Reports to Members

RESTON, VA, USA – November 21, 2019- Global Resilience Federation (GRF) has partnered with Red Sky Alliance of New Boston, NH to offer automated and customized threat reports to GRF member companies.

To read the full Press Release in our portal follow this link https://www.wapacklabs.com/news

China Coverage of Report on the Cyber Vulnerabilities of Asian Ports

Nanyang Technological University in Singapore has just released a report examining the economic losses expected if Asian port systems, including several in China, were subjected to a major cyber-attack.  The report concluded that there could be direct and indirect losses as great as US$110 billion spread across the world.

To read the full article in our portal, and find an archive of related reporting, follow this link to - https://redskyalliance.org/xindustry/china-coverage-of-report-on-the-cyber-vulnerabilities-of-asian-po

Wapack Labs Sinkhole Blacklist

TLP AMBER ANNOUNCEMENT:   

Reporting Period: November 25, 2019

Wapack Labs identified connections from 29,601 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems. 

Wapack Labs Keylogger Blacklist

TLP AMBER ANNOUNCEMENT:

Compromised Email Accounts
Reporting Period: November 25, 2019 

On 25 November 2019, Wapack Labs identified 8 unique email accounts compromised with keyloggers and used to log into mostly personal accounts and organizations. Attackers may be able to access not only email addresses but also financial, social media and other data.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com 

Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems. 

Tuesday, November 19, 2019

Wapack Labs Sinkhole Blacklist

TLP AMBER ANNOUNCEMENT:   

Reporting Period: November 18, 2019

Wapack Labs identified connections from 72,009 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkhole domains.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems. 

Wapack Labs Keylogger Blacklist

TLP AMBER ANNOUNCEMENT:

Compromised Email Accounts
Reporting Period: November 18, 2019 

On 18 November 2019, Wapack Labs identified 34 unique email accounts compromised with keyloggers and used to log into mostly personal accounts and organizations. Attackers may be able to access not only email addresses but also financial, social media and other data.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com 

Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems. 

Tuesday, November 5, 2019

Wapack Labs Keylogger Blacklist

TLP AMBER ANNOUNCEMENT:

Compromised Email Accounts
Reporting Period: November 4, 2019 

On 4 November 2019, Wapack Labs identified 7 unique email accounts compromised with keyloggers and used to log into mostly personal accounts and organizations. Attackers may be able to access not only email addresses but also financial, social media and other data.

Contact Wapack Labs for more information:
603-606-1246, or feedback@wapacklabs.com 

Action recommendation: Users should immediately place each of these email accounts in a block status in intrusion prevention systems.