Tag feed

#threat-intelligence

1,176 posts35 followers

Explore Hashnode

Alternatives

Trending tags this week

JJebitoksharonjebitok.com2d ago · 24 min read

Threat Hunting: Introduction

Link to the challenge on TryHackMe: Threat Hunting: Introduction Introduction Threat hunting is the systematic, proactive search for malicious activity in your environment that may have evaded detecti

0

ĐVĐinh Văn Mạnhblog.fiscybersec.comSep 5 · 17 min read

Knight Office: The Phishing-as-a-Service Kit That Steals Microsoft 365 Sessions

Overview On September 2, 2026, Huntress published an analysis of Knight Office — a newly discovered phishing-as-a-service (PhaaS) kit, uncovered while investigating an AiTM (Adversary-in-the-Middle) a

0

ĐVĐinh Văn Mạnhblog.fiscybersec.comSep 5 · 18 min read

MoiClient: Backdoor That Hides Inside SumatraPDF

Overview On September 2, 2026, AhnLab ASEC (ATCP team) published an analysis of MoiClient — a newly identified Windows backdoor distributed via a fake invoice email, deploying a notable multi-layer de

0

4F404 Founders404-founders.comSep 5 · 11 min read

snap7, AI, and Port 102: How Attackers Are Democratizing Siemens S7 PLC Exploitation

Abstract Five agencies signed a joint advisory in August 2026 warning that attackers are using AI to write exploitation scripts against Siemens S7 industrial controllers - and the library they are bui

0

VNVũ Nhật Lâmblog.fiscybersec.comSep 3 · 16 min read

Manic malware: When Isolating a Device No Longer Stops the Data Leaving

Summary On 20 August 2026, ThreatFabric's Mobile Threat Intelligence team published Manic — a new Android malware family actively distributed in the wild, sitting at the intersection of Android bankin

0

LTLưu Tuấn Anhblog.fiscybersec.comSep 3 · 10 min read

Nearly 2,000 WordPress Websites Taken Over: The Secret Behind the StopAndProtect Campaign

Do you believe that just one click on the familiar "I'm not a robot" (CAPTCHA) verification box can empty your cryptocurrency wallet and turn your computer into a "slave" in a global criminal network?

0

VNVũ Nhật Lâmblog.fiscybersec.comSep 3 · 19 min read

ValleyRAT and the Cost of a Valid Signature: When the Payload Has No Magic Bytes Left to Catch

Summary The victim extracts a ZIP archive and sees exactly one file: 07.30Document details.exe. That file is a genuine Overwolf Ltd executable with a valid digital signature, simply renamed. The other

0

ĐVĐinh Văn Mạnhblog.fiscybersec.comAug 31 · 29 min read

SLEEPWALKER: A Passive Backdoor That Wakes Up for Exactly One Packet, Carries Its Own Bytecode Language, and Hides Inside ESET Management Agent

Overview On August 24, 2026, independent malware researcher Dominik Reichel (former Palo Alto Networks Unit 42) published an exceptionally detailed analysis on his personal blog (r136a1.dev) of SLEEPW

0

LTLưu Tuấn Anhblog.fiscybersec.comAug 31 · 11 min read

TWINLOOT: When Microsoft Cloud Becomes a Hacker's "Control Center"

Imagine a nightmare scenario for every SOC team: An attacker lies deep inside the internal network for weeks, silently opening up to 128 administrative connection streams (SMB, RDP, WinRM) to move lat

0

ĐVĐinh Văn Mạnhblog.fiscybersec.comAug 25 · 17 min read

Fake Microsoft "SysScan": Bogus Security Scanner Invents Problems, Tricks Victims Into Uninstalling Their Antivirus, Then Funnels Them Into a Refund Scam

Overview On August 24, 2026, Malwarebytes disclosed a wave of websites calling themselves "SysScan," carrying Microsoft branding, claiming to check whether your antivirus (AV) software is working. Eve

0

#threat-intelligence

Search Hashnode

#threat-intelligence

Explore Hashnode

Trending tags this week

Threat Hunting: Introduction

Knight Office: The Phishing-as-a-Service Kit That Steals Microsoft 365 Sessions

MoiClient: Backdoor That Hides Inside SumatraPDF

snap7, AI, and Port 102: How Attackers Are Democratizing Siemens S7 PLC Exploitation

Manic malware: When Isolating a Device No Longer Stops the Data Leaving

Nearly 2,000 WordPress Websites Taken Over: The Secret Behind the StopAndProtect Campaign

ValleyRAT and the Cost of a Valid Signature: When the Payload Has No Magic Bytes Left to Catch

SLEEPWALKER: A Passive Backdoor That Wakes Up for Exactly One Packet, Carries Its Own Bytecode Language, and Hides Inside ESET Management Agent

TWINLOOT: When Microsoft Cloud Becomes a Hacker's "Control Center"

Fake Microsoft "SysScan": Bogus Security Scanner Invents Problems, Tricks Victims Into Uninstalling Their Antivirus, Then Funnels Them Into a Refund Scam