Technology ❯ Cybersecurity ❯ Threat Intelligence

Attack Techniques

Post-Compromise Attacks Command-and-Control (C&C) Remote Dynamic Dependencies RDP Attacks Client ID Spoofing Captive Portals CosmicPulse

Microsoft Says FSB‑Linked Star Blizzard Used RedFlick to Target 100+ Organizations

The company published indicators, detections, mitigations, and warned one command‑and‑control domain remained active to guide defenders

Russian State‑Linked APT Uses Hotel Wi‑Fi Captive Portals to Steal Microsoft 365 Credentials

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

DragonForce Used Microsoft Teams Relays to Hide New Backdoor

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

100,000-IP Botnet Targets U.S. RDP Services in Coordinated Campaign