We have been reporting issues with Digital Ocean use by threat actors over the last several weeks. This past week we noted several remote code execution attacks originating from Digital Ocean and our researchers have also noted that there has been some increases in traffic from Digital Ocean being seen at many of our monitored sites. Previously we had put out some bulletins on malware being hosted on Digital Ocean but this is the first time we have observed a coordinated atta

Nearly daily we put out information on the latest attacks observed so that companies can check their logs to see if they are being affected by malicious activity. Yesterday the SOC engineer on duty received reports of 3 different IP addresses all trying to leverage the same exploits against home and business routers owned by the telecom company. Upon researching and then going back and looking at historical data he was surprised that all of the attacks were originating from D

We have been reporting on NETCORE router attacks recently. Today we noted that these attacks are now coming from AWS. We believe that our publishing of the IP addresses for this campaign may have caused the threat actor to move to AWS away from the compromised systems that we were seeing being used in these attacks previously. We have reported frequently on the vulnerable routers and you can view more information on these attacks in a previous blog post. There are similaritie