Sauron Fast context enumeration for newly obtained Active Directory credentials. Why Sauron? When you obtain fresh credentials (password spraying, phishing, hash replay, etc.), the first thing you need is context: Who is this account...
The scale of DDoS attacks continues to surge at a breathtaking pace, and effective protection is increasingly defined not only by raw bandwidth, but by an infrastructure’s ability to withstand brief yet extreme traffic...
OAuthSeeker is an red team tool for performing phishing attacks using malicious OAuth applications to compromise user identities within Microsoft Azure and Office365. Features OAuthSeeker provides the following key features: Azure App OAuth Phishing: Perform OAuth...
An unexpected attempt to watch the India–Pakistan match led a network researcher to uncover a compromised europa[.]eu subdomain that attackers were abusing for SEO-spam and redirection to fraudulent streaming sites. Instead of a legitimate...
One of the most popular unofficial YouTube clients for Android TV has been compromised — a malicious build infiltrated the SmartTube application, signed with the developer’s stolen keys. The incident has raised serious concerns...
Police in South Korea have detained four individuals in connection with the hacking of more than 120,000 IP security cameras installed in private homes and offices—footage from which the perpetrators allegedly mass-produced and sold...
Against the backdrop of a surge in schemes involving the remote manipulation of infected devices, a new tool for attacking Android has emerged on the cybercrime market. Threat-analysis firms report the appearance of several...
The Whonix team has unveiled a test build of the major release Whonix 18.0.7.5, a distribution designed for anonymous internet use, and is calling on the community to assist with testing. Prebuilt images are...
The Japanese brewing giant Asahi has revealed that a September cyberattack resulted in one of the most significant data incidents in its history: the personal information of more than 1.5 million people was put...
GreyNoise Labs has unveiled GreyNoise IP Check, an online service that allows users to determine whether their IP address has been observed participating in suspicious scanning activity linked to botnets or residential proxy networks....
During AWS’s major outage in October, Fortinet specialists uncovered a new botnet, ShadowV2, built on Mirai-derived malware and targeting IoT devices worldwide. According to FortiGuard Labs, the campaign appeared to be a “trial run”...
The servicing chain of the U.S. mortgage market has suffered a new disruption following an incident at SitusAMC — a key link responsible for supporting mortgage transactions, processing payments, and storing document packages for...