<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><span style="color:rgb(0,0,0);font-family:"Open Sans","Lucida Grande","Lucida Sans Unicode",Arial,Helvetica,Verdana,sans-serif;font-size:12px;white-space:pre-wrap">Good evening team,</span></div><div dir="ltr"><font color="#000000" face="Open Sans, Lucida Grande, Lucida Sans Unicode, Arial, Helvetica, Verdana, sans-serif"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div><div dir="ltr"><div class="gmail-im_history_message_wrap gmail-im_grouped" style="box-sizing:border-box;color:rgb(0,0,0);font-family:"Open Sans","Lucida Grande","Lucida Sans Unicode",Arial,Helvetica,Verdana,sans-serif;font-size:12px"><div class="gmail-im_message_outer_wrap gmail-hasselect" style="box-sizing:border-box"><div class="gmail-im_message_wrap gmail-clearfix" style="box-sizing:border-box;max-width:560px;padding:0px 15px;margin:0px auto"><div class="gmail-im_content_message_wrap gmail-im_message_out" style="box-sizing:border-box;margin:8px 10px 8px 16px"><div class="gmail-im_message_body" style="box-sizing:border-box;overflow:hidden;margin-left:57px"><div style="box-sizing:border-box"><div class="gmail-im_message_text" dir="auto" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap">During the last week we hosted an Active Defense for Adversary Pursuit training at Naivasha. The training focused on how to detect TTPs, used by the local adversaries in East and Central Africa. We used a CTI report that was handed to several Financial institutions on 13th December to enumerate attacks by these groups and how to fight them out of the infrastructure. That CTI Report was not shared with all banks but several had it and we have noted these tools are still active in our infrastructures, and hence deciding to take it public.</div><div class="gmail-im_message_text" dir="auto" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div></div></div><div class="gmail-im_message_body" style="box-sizing:border-box;overflow:hidden;margin-left:57px"><div style="box-sizing:border-box"><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap">This CTI Report is number 103 released on December 13th 2019 and can be downloaded on this link.</div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><b><a href="http://onnetservices.io/Public/ADVISORY103.pdf">http://onnetservices.io/Public/ADVISORY103.pdf</a></b><br></div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div></div></div><div class="gmail-im_message_body" style="box-sizing:border-box;overflow:hidden;margin-left:57px"><div style="box-sizing:border-box"><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap">This CTI report also contains I&Ws (Indicators and Warnings) of breaches that actually occurred on December, January 2020 and Feb. This CTI was used for the training at Naivasha and the link below contains the Declassified version of the class.</div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><b><a href="http://onnetservices.io/Public/ADAPClassNaivasha-DeclassifiedForTheCommunity.pdf">http://onnetservices.io/Public/ADAPClassNaivasha-DeclassifiedForTheCommunity.pdf</a></b><br></div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div><div class="gmail-im_message_text" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div></div></div></div></div></div></div><div class="gmail-im_history_message_wrap gmail-im_grouped" style="box-sizing:border-box;color:rgb(0,0,0);font-family:"Open Sans","Lucida Grande","Lucida Sans Unicode",Arial,Helvetica,Verdana,sans-serif;font-size:12px"><div class="gmail-im_message_outer_wrap gmail-hasselect" style="box-sizing:border-box"><div class="gmail-im_message_wrap gmail-clearfix" style="box-sizing:border-box;max-width:560px;padding:0px 15px;margin:0px auto"><div class="gmail-im_content_message_wrap gmail-im_message_out" style="box-sizing:border-box;margin:8px 10px 8px 16px"><div class="gmail-im_message_meta gmail-pull-right gmail-text-right gmail-noselect" style="box-sizing:border-box;text-align:right;float:right"><span class="gmail-im_message_date gmail-clickable" style="box-sizing:border-box;color:rgb(173,173,173);font-size:0.85em;padding:0px 0px 20px 10px"><span class="gmail-im_message_date_text gmail-nocopy" style="box-sizing:border-box"></span></span></div><div class="gmail-im_message_body" style="box-sizing:border-box;overflow:hidden;margin-left:57px"><div style="box-sizing:border-box"><div class="gmail-im_message_text" dir="auto" style="box-sizing:border-box;word-wrap:break-word;line-height:18px;white-space:pre-wrap"><br></div></div></div></div></div></div></div><div>Let's help each other to defend and minimize breaches in our East and Central African region by degrading, denying, disrupting and destroying these Advanced Financial Threats to their tracks.</div><div><br></div><div>Thankful, </div><div><br></div><div>#FukuzaMwizi</div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div>--</div><div>OnNet CTO</div><div><br></div><div><a href="http://www.onnetservices.io" target="_blank">http://www.onnetservices.io</a><br><br><br><br><br></div></div></div></div></div></div></div></div>