--- title: "#credential-theft articles | Hashnode" description: "Explore 10 articles tagged #credential-theft on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/credential-theft" --- Tag # #credential-theft 10 posts · 0 followers [Lakshay Dhoundiyal](https://hashnode.com/@LakshayDhoundiyal) · [Aug 26](https://hashnode.com/posts/browser-in-the-browser-attack/6a8ec4ac22aa1bb0f5112416) ### [Browser-in-the-Browser Attack: How Fake Login Windows Steal Real Passwords](https://lakshaydhoundiyal.hashnode.dev/browser-in-the-browser-attack?utm_source=hashnode&utm_medium=feed) A login popup can look exactly like the real thing. The problem is, your eyes may not be able to tell the difference. 10 min read · [lakshaydhoundiyal.hashnode.dev](https://lakshaydhoundiyal.hashnode.dev/browser-in-the-browser-attack?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 11](https://hashnode.com/posts/tryhackme-the-london-bridge-writeup/6a7aa0e4edd948b2bf3afa5c) ### [TryHackMe : The London Bridge writeup](https://exploitnotes.hashnode.dev/tryhackme-the-london-bridge-writeup?utm_source=hashnode&utm_medium=feed) TryHackMe London Bridge walkthrough covering SSRF, loopback bypass, root HTTP server, SSH key theft, symlink abuse, and Firefox credential recovery. 18 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-the-london-bridge-writeup?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tryhackme-the-london-bridge-writeup/6a7aa0e4edd948b2bf3afa5c) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 5](https://hashnode.com/posts/trickbot/6a735c793271a2fbb460d843) ### [TrickBot](https://sagunwrites.hashnode.dev/trickbot?utm_source=hashnode&utm_medium=feed) The Malware That Became a Cybercrime Swiss Army Knife 7 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/trickbot?utm_source=hashnode&utm_medium=feed) [Jennifer Zack](https://hashnode.com/@troublesome) · [Jul 14](https://hashnode.com/posts/the-rise-of-infostealer-malware-why-your-password-might-already-be-for-sale/6a55d2fdd352a8817ed90b0a) ### [The Rise of Infostealer Malware: Why Your Password Might Already Be for Sale](https://cybersage.hashnode.dev/the-rise-of-infostealer-malware-why-your-password-might-already-be-for-sale?utm_source=hashnode&utm_medium=feed) No ransom note, no warning — infostealers silently steal passwords, cookies & crypto. Learn how they work and how to protect your accounts. 6 min read · [cybersage.hashnode.dev](https://cybersage.hashnode.dev/the-rise-of-infostealer-malware-why-your-password-might-already-be-for-sale?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Jun 24](https://hashnode.com/posts/fortibleed-86000-firewalls-compromised/6a3beb617aab504ef0872649) ### [FortiBleed: 86,000 Firewalls Compromised by Default Passwords](https://404-founders.com/blog/fortibleed-86000-firewalls-compromised?utm_source=hashnode&utm_medium=feed) Half of all internet-facing FortiGate devices had their credentials stolen. The root cause is embarrassingly simple. 3 min read · [404-founders.com](https://404-founders.com/blog/fortibleed-86000-firewalls-compromised?utm_source=hashnode&utm_medium=feed) [Stephanie Anderson](https://hashnode.com/@securityinsights101) · [Jun 17](https://hashnode.com/posts/discover-credentials-and-privileged-accounts-before-cyber-attackers-do/6a32740c0e1a591edc21d63e) ### [Discover Credentials and Privileged Accounts Before Cyber Attackers Do](https://stephanie-anderson.hashnode.dev/discover-credentials-and-privileged-accounts-before-cyber-attackers-do?utm_source=hashnode&utm_medium=feed) Credential discovery finds unknown, unmanaged credentials that enable attacks. Discover privileged, local admin accounts, and enforce least privilege. 8 min read · [stephanie-anderson.hashnode.dev](https://stephanie-anderson.hashnode.dev/discover-credentials-and-privileged-accounts-before-cyber-attackers-do?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Apr 20](https://hashnode.com/posts/the-underground-access-economy-storm-infostealer-and-the-era-of-passwordless-attacks/69e5f89aa832607113f2ac9b) ### [The Underground Access Economy: Storm Infostealer and the Era of Passwordless Attacks](https://blog.fiscybersec.com/the-underground-access-economy-storm-infostealer-and-the-era-of-passwordless-attacks?utm_source=hashnode&utm_medium=feed) Executive Summary In early 2026, Varonis Threat Labs identified Storm — a new infostealer circulating on underground cybercrime networks for under $1,000 per month. Storm is not simply another commodi 13 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/the-underground-access-economy-storm-infostealer-and-the-era-of-passwordless-attacks?utm_source=hashnode&utm_medium=feed) [Virusis Blog](https://hashnode.com/@virusis) · [Apr 3](https://hashnode.com/posts/03042026-cyber-security-briefly-news-escalating-cloud-supply-chain-attacks-and-widespread-credential-theft-drive-urgent-security-posture-shifts/69cf7bee46bb16ec1726f286) ### [03/04/2026 Cyber Security Briefly News - Escalating Cloud Supply Chain Attacks and Widespread Credential Theft Drive Urgent Security Posture Shifts](https://blog.virusis.com/03042026-cyber-security-briefly-news-escalating-cloud-supply-chain-attacks-and-widespread-credential-theft-drive-urgent-security-posture-shifts?utm_source=hashnode&utm_medium=feed) ⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros 6 min read · [blog.virusis.com](https://blog.virusis.com/03042026-cyber-security-briefly-news-escalating-cloud-supply-chain-attacks-and-widespread-credential-theft-drive-urgent-security-posture-shifts?utm_source=hashnode&utm_medium=feed) [Oghenemaro Ikelegbe](https://hashnode.com/@Maro101) · [Mar 31](https://hashnode.com/posts/pass-the-hash-attacks/69cb16099fffa74740a7ccb9) ### [Pass-the-Hash Attacks](https://cybersage.hashnode.dev/pass-the-hash-attacks?utm_source=hashnode&utm_medium=feed) Think of a thief making an exact copy of your house key just by looking at a picture. That's similar to how a Pass-the-Hash attack operates, and it's one of the sneakiest ways hackers break into compu 5 min read · [cybersage.hashnode.dev](https://cybersage.hashnode.dev/pass-the-hash-attacks?utm_source=hashnode&utm_medium=feed) [Steven Stone](https://hashnode.com/@redsheep) · [Mar 12](https://hashnode.com/posts/storm-2561-weaponizes-seo-to-push-malicious-vpn-software/69b346bb82b5db5da98b93a7) ### [Storm-2561 Weaponizes SEO to Push Malicious VPN Software](https://redsheeptrends.hashnode.dev/storm-2561-weaponizes-seo-to-push-malicious-vpn-software?utm_source=hashnode&utm_medium=feed) Russian threat group Storm-2561 is using search engine optimization tricks to distribute fake VPN clients that steal credentials. Here's how they're doing it. 4 min read · [redsheeptrends.hashnode.dev](https://redsheeptrends.hashnode.dev/storm-2561-weaponizes-seo-to-push-malicious-vpn-software?utm_source=hashnode&utm_medium=feed)