Emerging Threat: SSH Authorized Keys Injection via Compromised Host in Shanghai
SGI observed a low-severity threat involving potential SSH authorized keys injection originating from Shanghai. Immediate investigation is crucial.
Suspicious Javascript Framework Transfer from Iran
SGI detected a suspicious Javascript framework transfer from Iran (IP: 85.133.216.85). While low severity, further investigation is recommended.
Observed Activity: Suspicious File Transfer from Iranian IP
SGI observed a suspicious file transfer originating from an Iranian IP address (AS211056). The transferred file is a low severity javascript framework.
Observed Activity: Suspicious Traffic from Hong Kong Network
SGI detected suspicious traffic originating from a Hong Kong-based ASN. Analysis reveals a low-severity JavaScript framework file with potential reconnaissance activity.