Attackers turned Railway.com's free cloud platform into a Microsoft 365 token-stealing machine, hitting 268+ organizations and 100+ MSPs. Here's the full infrastructure breakdown.
A threat actor exploited SolarWinds Web Help Desk, then ran victim triage from a free Elastic Cloud SIEM trial. The infrastructure they left behind told us everything.
Huntress traced a full Iranian-linked APT intrusion from RDP initial access through DLL side-loading and C2 communications. This is the complete MuddyWater attack chain, step by step.
Huntress observed active exploitation of SolarWinds Web Help Desk across three customers — with attackers deploying Cloudflare tunnels and Velociraptor for persistence immediately after getting in.
ScreenConnect keeps showing up in ransomware chains, not because of a new exploit, but because of social engineering. The Huntress SOC documents the tactics.
An attacker's mistake gave Huntress an unusually clear window into how a real cybercriminal operation runs day-to-day. Here's the full investigation, including the timeline they didn't want us to see.
As cyber threats increasingly target the healthcare sector, radiology clinics face unique risks that could compromise patient safety and data integrity. Join us for an essential livestream where we’ll delve into the insights from the 2024 Cyber Threat Report by Huntress, focusing on the specific vulnerabilities impacting healthcare providers today.
Cyber threats are always evolving, so staying a step ahead of them is critical. Join the Huntress for an in-depth exploration of the latest cyber trends, shady tactics, and tradecraft we exposed in the 2024 Cyber Threat Report.
