Technology ❯ Cybersecurity ❯ Threat Actors

Attack Techniques

Credential Theft Living-off-the-Land MITRE ATT&CK Credential Stuffing Evasion Methods Downgrade Attack Living-off-Trusted-Sites (LOTS) Remote Access Trojans Lua Injection Lateral Movement Credential Harvesting

Researchers Show Copilot and Grok Can Be Co‑opted as Covert Malware C2 Relays

The approach exploits AI browsing to retrieve attacker pages, returning embedded instructions as a bidirectional channel without API credentials.

Microsoft Details ClickFix Variant Using DNS Lookups to Stage Malware

Attackers Shift From Ransomware Encryption to Stealthy ‘Digital Parasites,’ Picus Report Finds

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

Sneaky 2FA Phishing Kit Adds BitB Pop-Ups to Steal Microsoft Credentials

Qualys Reports Surge in Botnet Exploits Targeting PHP Servers, IoT and Cloud Gateways

Qilin Ransomware Runs Linux Encryptor on Windows With BYOVD to Cripple Backups

Akira Breaks Into MFA-Protected SonicWall VPNs in Ongoing Access Campaign

Darktrace Details First Auto-Color Malware Attack Exploiting Patched SAP NetWeaver Flaw