孙孙永瑞intoolkit-ai-reviews.hashnode.dev·3d ago · 5 min readHow 474 Microsoft 365 Sessions Beat MFA: Inside an Evilginx2 Relay OperationMost of us still think of MFA as the control that stops phishing. It isn't, and hasn't been for years. What MFA stops is *reuse* — someone taking your password and logging in later. What it does not s00
JJebitokinsharonjebitok.com·3d ago · 17 min readPreparation (TryHackMe)Link to the walkthrough on TryHackMe: Preparation Introduction The Preparation phase is the foundation of every effective incident response capability. Before an organization can detect, contain, or r00
4F404 Foundersin404-founders.com·6d ago · 3 min readASCII Smuggling: How an AI Attack Became a Phishing ToolA technique popularized in AI prompt-injection research is now being used to evade phishing filters. In the campaign Microsoft documented, no AI assistant was required for the evasion step. ASCII smug00
AKAndriy Kovalenkoindeadpacket.hashnode.dev·Sep 4 · 24 min readThe Ransomware Attack Starts Before Encryption: The Warning Signs Security Teams Cannot Ignore in 2026Most people still picture ransomware as a malicious program that suddenly lands on a computer and starts encrypting files. That image is dangerously incomplete. In a modern enterprise attack, encrypti00
VNVũ Nhật Lâminblog.fiscybersec.com·Sep 3 · 19 min readValleyRAT and the Cost of a Valid Signature: When the Payload Has No Magic Bytes Left to CatchSummary The victim extracts a ZIP archive and sees exactly one file: 07.30Document details.exe. That file is a genuine Overwolf Ltd executable with a valid digital signature, simply renamed. The other00
PGPred Grayinipqs.hashnode.dev·Aug 30 · 22 min readIPQS False Positive: How a Legitimate New Domain Got a 95 Risk Score A little over two months ago, I registered a domain for personal use. The plan was simple. I wanted a permanent email address based on my last name, something like first@lastname.me. I registered the 00
4F404 Foundersin404-founders.com·Aug 28 · 5 min readAnonyMousKIT: AI Voice Calls Steal iPhone CodesA phishing-as-a-service platform connected to 506 domains uses AI voice agents impersonating Apple Support to trick owners of lost or stolen iPhones into reading out their own device passcode. CVE: N00
LDLakshay Dhoundiyalinlakshaydhoundiyal.hashnode.dev·Aug 26 · 10 min readBrowser-in-the-Browser Attack: How Fake Login Windows Steal Real PasswordsImagine you're browsing a website. You click “Sign in with Google.” A familiar login window appears. The logo looks right. The colors look right. The layout looks right. Even the little browser frame 20
SMScott McMahaninaitransformeronline.hashnode.dev·Aug 13 · 1 min readAI-Powered Phishing in 2026Phishing attacks are becoming more difficult to detect as cybercriminals use AI to create polished messages, personalize fraudulent requests, and automate campaigns at scale. Traditional Warning Signs00
张张先生inaicryptowallet.hashnode.dev·Aug 7 · 6 min readPhishing Protection and the DApp Whitelist: How a Wallet Decides Which Sites the AI May TrustPhishing is the oldest and still the most effective attack in crypto. The adversary does not need to break cryptography; it only needs to convince the wallet â or the person holding it â to approv00
