All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Team Huntress
Identity Security
Business Email Compromise Prevention: Best Practices
Business Email Compromise Prevention: Best Practices

BEC attacks use a compromised corporate email account to trick employees into transferring money. They're simple, effective, and growing. Here's what BEC looks like and how to stop it before it succeeds.

October 8, 2024
Time Travelers Busted: How to Detect Impossible Travel
Time Travelers Busted: How to Detect Impossible Travel

Impossible Travel is an identity attack detection signal, and it's trickier to get right than it sounds. Huntress developers break down how it's detected and the real-world scenarios that complicate it.

March 7, 2024
Business Email Compromise via Azure Administrative Privileges
Business Email Compromise via Azure Administrative Privileges

Most BEC attacks start with one compromised account. This one had hands on multiple via Azure admin privileges. Huntress found and helped stop a massive attack targeting organizations across M365.

Thwarting Financial Fraud: Shutting Down Hackers in Microsoft 365
Thwarting Financial Fraud: Shutting Down Hackers in Microsoft 365

Huntress has been hunting malicious actors across 60,000+ Microsoft 365 accounts. Here are the most interesting incidents from the beta phase and the financial fraud tradecraft that almost worked.

One MSP, Three Microsoft 365 Compromises, 72 Hours
One MSP, Three Microsoft 365 Compromises, 72 Hours

One MSP. Three Microsoft 365 compromises. 72 hours. This is the opening post in a series covering what Huntress found during the ITDR beta — and what the incidents reveal about identity attacks.