Threat Intelligence Report - 1st March to 7th March 2021

   Trends

• The top attacker country was China with 130218 unique attackers (60.78%).

• The top Phishing campaign detected was againts Facebook with 103 instances detected.
   

Linux Foundation Announces New Open Source Software Signing Service

The SolarWinds hack has come and is not gone yet. However, on a positive note, it is leaving in its wake several remedial and preventative measures being implemented to avoid such attacks in future. One pertinent issue raised by SolarWinds was how to secure the software supply chain. 

Linux Foundation, Red Hat, Google and Purdue University address this issue by creating the Sigstore 
Project. 

The Sigstore project entails creating a secure public log bank in which developers and software 
providers of open-source code deposit cryptographically signed software. Sigstore allows for 
identifying software through the verified reproducible builds, a system where an entity guarantees the authenticity of software by consistently getting the same results when it is subjected to the same input.
This will allow for software tracking and, ultimately, identification if used in any cybercriminal attacks. Sigstore is a tremendous attempt at standardising the software signing practice which GitHub has tried to implement. 

   Top Attackers By Country

   Top Attackers By Country

   Threat Geo-location

   Top Attacking Hosts

Top Attackers

   Top Network Attackers

   Top Phishing Campaigns