Threat Intelligence Briefing

The threat landscape has surged by 47.2% globally, with 7,871 incidents recorded. Malware C2 dominated at 58.7% of cases, followed by severe abuse (11%) and attacks (8.4%). Nordic activity remained low but notable, with Sweden reporting 10 incidents (primarily attacks and brute force) and Finland 6 (attacks and web abuse). Norway and Denmark showed minimal activity, with 2 and 1 incidents respectively. Key attack sources included the US (577), China (388), and the Netherlands (364), with SSH brute force as the predominant tactic. High-risk IPs like <a href="https://ip.wayscloud.services/ip-intelligence/195.178.110.30" target="_blank">195.178.110.30</a> (BG) and <a href="https://ip.wayscloud.services/ip-intelligence/104.248.87.236" target="_blank">104.248.87.236</a> (NL) were linked to repeated SSH brute force attempts. Recommendations include enhanced SSH hardening and monitoring of Dutch and Bulgarian IP ranges, particularly those targeting Nordic infrastructure.