Technology ❯ Cybersecurity ❯ Threat Actors

Attack Techniques

Credential Theft Privilege Escalation Living-off-the-Land Persistence Mechanisms Remote Code Execution MITRE ATT&CK Credential Stuffing Evasion Methods Downgrade Attack Living-off-Trusted-Sites (LOTS) Remote Access Trojans Lua Injection Lateral Movement Credential Harvesting

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

A crafted CSV upload created a hidden 'troot' root account, revealing telemetry gaps in SD‑WAN edge appliances that let intruders stay hidden.

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

AI Chatbots and SEO Poisoning Lead Users to GPU Cryptojacking Sites

Researchers Show Copilot and Grok Can Be Co‑opted as Covert Malware C2 Relays

Microsoft Details ClickFix Variant Using DNS Lookups to Stage Malware

Attackers Shift From Ransomware Encryption to Stealthy ‘Digital Parasites,’ Picus Report Finds

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

Sneaky 2FA Phishing Kit Adds BitB Pop-Ups to Steal Microsoft Credentials

Qualys Reports Surge in Botnet Exploits Targeting PHP Servers, IoT and Cloud Gateways

Qilin Ransomware Runs Linux Encryptor on Windows With BYOVD to Cripple Backups

Akira Breaks Into MFA-Protected SonicWall VPNs in Ongoing Access Campaign

Darktrace Details First Auto-Color Malware Attack Exploiting Patched SAP NetWeaver Flaw