Threat Intelligence Report December 14th - December 20th 2020

   Trends

• The top attacker country was China with 158974 unique attackers (57.26%)

• The top Trojan C&C server detected was Azorult with 16 instances detected.

• The top phishing campaign detected was against Facebook accounts with 48 instances detected.
  
  ​​​​​SolarWinds adviser warned of lax security years before hack
  The global cybersecurity community is still feeling the ripples of the SolarWinds Orion breach. Bloomberg's latest report indicates that a former security advisor for the SolarWinds Corp had previously warned senior management of the cybersecurity threat in 2017. However, his plan to resolve the threat was ignored. Leading to the largest cyberattack to target US government agencies and private companies.
  
  New Emotet strain detected just in time for the New Year
  WARNING: Red Piranha's Security Operations Centre warns of a new Emotet campaign which is lacing email communications with their highly adaptive and dangerous malware, cleverly disguised as festive greeting cards or COVID-19 reports.
  
  Our Security Researchers have highlighted that the Emotet malware is spread via emails containing a Microsoft Office attachment (traditionally Word) which upon opening, launch macros to download and install the malware. Additionally, they have noted that each includes multiple unique C2 IPs and domains within all of the malware variants.

   Top Attackers By Country

   Top Attackers By Country

   Threat Geo-location

51,922

   Top Attacking Hosts

Top Attackers

   Top Network Attackers

   Remote Access Trojan C&C Servers Found

Trojan C&C Servers Detected

AgentTesla  Amadey  Azorult  BlackNet  CobaltStrike  DiamondFox  Heodo  Kpot  Lokibot  Predator  Taurus  Trickbot  TriumphLoader  Other

   Common Malware

   Top Phishing Campaigns

   CVEs with Recently Discovered Exploits

     This is a list of recent vulnerabilities for which exploits are available.