Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• CloudZ RAT Exploits Microsoft Phone Link to Steal SMS OTPs

  GBHackers

  T1053.005 81% T1204.002 80% T1090.002 41%
  21 minutes ago
• Bad Connection: Global telecom exploitation by covert surveillance actors

  Hacker News (front page)

  T1071.001 91% T1090.003 84% T1111 62%
  2 days ago
• Two new extortion crews are speedrunning the Scattered Spider playbook

  CyberScoop

  T1090.002 68% T1566.002 68% T1657 59%
  5 days ago
• Bypassing DPI with eBPF, no VPN or proxy needed

  Lobsters — security tag

  T1090.002 75%
  2026-04-28
• Risky Bulletin: New fingerprinting technique can track Tor users

  Risky Business News

  T1090.002 77% T1090.003 33%
  2026-04-27
• FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

  The Hacker News

  T1190 98% T1584.005 94% T1542.003 90%
  2026-04-24
• Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

  Mandiant

  T1053.005 100% T1572 98% T1550.002 96%
  2026-04-23
• ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

  The Hacker News

  T1190 99% T1195.001 95% T1486 92%
  2026-04-23
• DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

  Check Point Research

  T1053.005 100% T1490 100% T1486 100%
  2026-04-20
• Inside the Mobile World Congress 2026 SOC: Detecting Shadow Traffic with Firepower 6100

  Cisco Security Blog

  T1071.001 82% T1090.003 78% T1090.002 64%
  2026-04-09
• Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox

  Palo Alto Unit 42

  T1071.004 99% T1572 98% T1525 94%
  2026-04-07
• The Invisible Army: Why IP Reputation Fails Against the Rotation Economy

  GreyNoise

  T1090.002 66% T1090.003 55%
  2026-04-02
• Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack

  Trend Micro Research

  T1059.001 99% T1055.001 98% T1567.002 97%
  2026-03-16
• Law Enforcement Dismantles SocksEscort Proxy Network in Operation Lightning

  Infosecurity Magazine

  T1090.003 62% T1090 57% T1090.002 51%
  2026-03-13
• Active Reconnaissance Campaign Targets SonicWall Firewalls Through Commercial Proxy Infrastructure

  GreyNoise

  T1190 97% T1090.003 59% T1588.006 45%
  2026-02-27
• From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day

  Mandiant

  T1132.001 97% T1190 91% T1059.004 72%
  2026-02-17
• Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft

  Mandiant

  T1657 95% T1556.006 84% T1059.001 79%
  2026-01-30
• No Place Like Home Network: Disrupting the World's Largest Residential Proxy Network

  Mandiant

  T1090 93% T1090.002 84% T1557.001 75%
  2026-01-28
• PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182

  Huntress

  T1543.002 99% T1070.003 99% T1105 98%
  2025-12-09
• What Does the Dark Web Look Like? Pulling Back the Curtain | Huntress

  Huntress

  T1090.003 73% T1588.002 61% T1657 54%
  2025-12-03
• Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques

  Trend Micro Research

  T1486 99% T1219 91% T1068 86%
  2025-10-23
• An Attacker’s Blunder Gave Us a Look Into Their Operations

  Huntress

  T1059.006 92% T1176.001 91% T1591 73%
  2025-09-09
• Join Huntress' John Hammond & Dave Kleinatland on a | Huntress

  Huntress

  T1486 92% T1657 66% T1090.002 33%
  2025-08-27
• SparkRAT: Exploiting Architectural Weaknesses in Open-Source Offensive Tools

  F5 Labs

  T1588.002 94% T1071.001 91% T1588.001 90%
  2025-08-06
• Navigating Through The Fog

  The DFIR Report

  T1572 99% T1046 99% T1486 98%
  2025-04-28
• 2025 Advanced Persistent Bots Report

  F5 Labs

  T1090.002 92% T1584.005 80% T1090 73%
  2025-03-28
• How to Test Adversary-in-the-Middle Without Hacking Tools

  Black Hills InfoSec

  T1556.006 95% T1566.002 90% T1111 90%
  2025-03-24
• Light at the End of the Dark Web

  Black Hills InfoSec

  T1486 98% T1090.002 64% T1657 61%
  2025-03-03
• Attack Tactics 9: Shadow Creds for PrivEsc w/ Kent & Jordan

  Black Hills InfoSec

  T1572 98% T1557.001 88% T1021.001 87%
  2025-01-20
• Does Santa Like NordVPN? | Huntress

  Huntress

  T1090.003 84% T1090.002 51% T1090 45%
  2024-12-16
• The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

  Volexity

  T1078 99% T1003.003 99% T1490 97%
  2024-11-22
• Satellite Hacking

  Black Hills InfoSec

  T1090.002 62%
  2024-10-03
• Proxying Your Way to Code Execution – A Different Take on DLL Hijacking

  Black Hills InfoSec

  T1574.001 99% T1055.001 98% T1546.015 95%
  2024-09-26
• Unveiling the Prototype Pollution Gadgets Finder

  Doyensec

  T1090.002 74%
  2024-02-16
• Combating Emerging Microsoft 365 Tradecraft: Initial Access | Huntress

  Huntress

  T1556.006 91% T1090.003 59% T1078.004 57%
  2023-12-27
• Calm In The Storm: Reviewing Volt Typhoon

  Huntress

  T1190 82% T1219 68% T1588.002 54%
  2023-06-08
• Forwarding Traffic Through SSH

  Black Hills InfoSec

  T1572 99% T1090.001 86% T1090.002 50%
  2023-02-23
• Reseller Bots: Understanding the Ecosystem

  F5 Labs

  T1090 73% T1090.002 38% T1657 38%
  2023-01-12
• Overblown Claims of Vulnerabilities, Exploits, & Severity | Huntress

  Huntress

  T1219 91% T1190 85% T1566.004 78%
  2022-12-14
• The DNS over HTTPS (DoH) Mess

  Black Hills InfoSec

  T1572 74% T1071.004 65% T1090.002 31%
  2022-02-15
• ProxyShell vs. ProxyLogon: What's the Difference? | Huntress

  Huntress

  T1190 95% T1090.002 32%
  2021-08-26
• Admin’s Nightmare: Combining HiveNightmare/SeriousSAM and AD CS Attack Path’s for Profit

  Black Hills InfoSec

  T1003.006 94% T1550.002 91% T1003.002 89%
  2021-08-06
• Credential Stuffing Tools and Techniques, Part 1

  F5 Labs

  T1110.004 95% T1090.002 88% T1078 57%
  2021-04-07
• Abusing Ngrok: Hackers at the End of the Tunnel | Huntress

  Huntress

  T1059.001 100% T1572 97% T1547.001 95%
  2021-03-16
• Cyber Threats Targeting Europe, Winter 2019

  F5 Labs

  T1046 98% T1090.002 54% T1571 33%
  2020-03-13
• Regional Threat Perspectives, Fall 2019: Middle East

  F5 Labs

  T1046 89% T1584.005 82% T1071.001 79%
  2019-11-21
• Using CloudFront to Relay Cobalt Strike Traffic

  Black Hills InfoSec

  T1055.001 93% T1090.004 87% T1090.002 44%
  2019-08-15
• Kazakhstan Attempts to MITM Its Citizens

  F5 Labs

  T1588.003 65% T1557 63% T1090.002 61%
  2019-08-01
• How To Rotate Your Source IP Address

  Black Hills InfoSec

  T1110.003 96% T1090 87% T1090.002 86%
  2019-03-19
• The RDP Through SSH Encyclopedia

  Black Hills InfoSec

  T1021.001 99% T1090.001 87% T1572 81%
  2019-02-28