Blog Post
Unboxing Phishing Kits: Advanced Cred Theft for Entry-Level Hackers
Huntress examines 3 phishing kits that hand beginner attackers everything they need to steal tokens. See what the attacks look like from the inside.
Blog Posts By This Author
All Categories
- Read more about Unboxing Phishing Kits: Advanced Cred Theft for Entry-Level Hackers
- Read more about M365 Token Spray and Replay Campaign Compromises Business Email AccountsBlog Post
M365 Token Spray and Replay Campaign Compromises Business Email Accounts
Huntress tracked a 10-week Microsoft 365 campaign pairing AiTM relays with token replay, rogue Entra devices, MFA tampering, and hidden inbox rules.
- Read more about Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform ServersBlog Post
Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
Huntress SOC found a threat actor exploiting a file upload flaw in recreation management to breach 3 municipal servers and steal payment data.
- Read more about Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to MalwareBlog Post
Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
A single X DM split into two malware chains: AMOS stealer on Mac, NetSupport Manager on Windows, see the Huntress SOC analyst breakdown.
- Read more about How a Google Search for Claude Led to MacSyncBlog Post
How a Google Search for Claude Led to MacSync
Huntress SOC analysts reverse engineer MacSync Stealer, a macOS infostealer spread through fake Claude Code download pages. Watch the full analysis.
- Read more about Twist the Nozzle on Password Spraying: A Tradecraft Tuesday RecapBlog Post
Twist the Nozzle on Password Spraying: A Tradecraft Tuesday Recap
A large-scale password-spraying campaign exploited a deprecated OAuth flow to bypass security. Here’s what defenders need to know to defend against similar attacks.
