Blog Post
Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
Huntress SOC found a threat actor exploiting a file upload flaw in recreation management to breach 3 municipal servers and steal payment data.
Blog Posts By This Author
All Categories
- Read more about Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
- Read more about Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to MalwareBlog Post
Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
A single X DM split into two malware chains: AMOS stealer on Mac, NetSupport Manager on Windows, see the Huntress SOC analyst breakdown.
- Read more about How a Google Search for Claude Led to MacSyncBlog Post
How a Google Search for Claude Led to MacSync
Huntress SOC analysts reverse engineer MacSync Stealer, a macOS infostealer spread through fake Claude Code download pages. Watch the full analysis.
- Read more about Twist the Nozzle on Password Spraying: A Tradecraft Tuesday RecapBlog Post
Twist the Nozzle on Password Spraying: A Tradecraft Tuesday Recap
A large-scale password-spraying campaign exploited a deprecated OAuth flow to bypass security. Here’s what defenders need to know to defend against similar attacks.
- Read more about Cybersecurity Lessons From Taylor and Travis’s WeddingBlog Post
Cybersecurity Lessons From Taylor and Travis’s Wedding
“Long Live” strong security! Taylor Swift & Travis Kelce’s wedding offers real cybersecurity lessons on layered defense, MFA, deception tools, and more.
