Threat Intelligence Briefing

Threat activity has decreased 26.7% globally in the last 6 hours. The majority of malicious activity is categorized as suspicious activity, followed by severe abuse. Across the Nordic region, Sweden experienced the highest volume of threats (15), primarily high threat and SSH brute force attempts. Finland saw 5 incidents of severe abuse, while Denmark, Iceland, and Norway each reported single instances of suspicious activity. No significant ISP or hosting provider abuse was observed in the Nordic region. Focus monitoring on Swedish networks exhibiting SSH brute force activity. Observe infrastructure changes in botnet and malware C2 attacks. Track IPs 196.251.115.74, 91.92.241.8, 144.172.109.62, 45.90.98.43 and 188.241.62.243; these IPs show high counts of botnet and malware command and control activity.