CSA Threat Alert: QLIN & Blackbasta IOCs Required Monitoring and Blocking

blog

Dear all,

I would like to ask you to in order to enhance our security measures to protect our organization’s critical assets to monitor and block on the firewall the IP addresses and/or domains reported in the documents attached and also below:

  • 103.224.212.217
  • 23.227.38.68
  • 79.98.24.19
  • manviro.com

 

It is important that the ingress and egress traffic is restricted and internet traffic towards malicious IP/domains is automatically filtered by your firewalls.

If you have any concerns or need assistance, please write an email to cybersecurity@itsec.hr or in case of cybersecurity incident open a PMI/MI security related in the ITSec Portal.

Facebook
Twitter
LinkedIn
Email

Leave a Reply

Your email address will not be published. Required fields are marked *

Signup our newsletter to get update information, news, insight or promotions.