Kevin BeaumontTewkesbury Borough Council are on day 5 of containment for their cyber incident. Media reporting suggests they have called in GCHQ, who are local to them (it’s probably more they just reported it to NCSC).
In their updated FAQ they ask the press to stop calling them about it.
From network traffic it looks like a crimeware group. #threatintel
All GNU social JP content and data are available under the