Threat Intelligence Report February 22nd - February 28th 2021

   
   Trends

• The top attacker country was China with 153498 unique attackers (59.66%).

• The top Phishing campaign detected was against Facebook with 104 instances detected.
  
  Once again, the importance of patching cannot be overemphasised. Four zero-day attacks were reported
   by Microsoft, dubbed the Hafnium attacks. The attacks target the vulnerability on Microsoft Exchange servers by executing a server-side request forgery and remote code execution. Microsoft has released a patch for Exchange servers. 
  
  A previously identified bug, Spectre, was reported to be used as leverage to attack Windows, Linux,
  Android, macOS and ChromeOS systems. The /etc/shadow file in Linux systems is used as leverage to
  move laterally and dumped Kerberos tickets as leverage for an attack in Windows systems. The patch
  has been available since the bug was identified. Details: CVE Identity is CVE 2017-5753   
  
  Default database credentials were used as leverage to steal personally identifiable information collected onto a database through logs generated by VPN apps for Android. Notably, the VPNs were possibly developed by the same person and carry the same features and utilise the same server. The solution to protecting one’s data when using a VPN would be to thoroughly assess the reviews to build trust in your
  VPN provider. 

  A VMWare vulnerability was detected, which can be used by malicious actors to remotely upload
  corrupted files and execute code in the logupload container. VMWare has provided a patch for this vulnerability. Details: CVE Identity-CVE-2021-21978 with CVSS score of 8.6 and severity rated as
  Important. 

   Top Attackers By Country

   Top Attackers By Country

   Threat Geo-location

  Top Attacking Hosts

Top Attackers

   Top Network Attackers

   Top Phishing Campaigns