NTDS.dit is the Active Directory database on a domain controller. It holds directory objects, password hashes, and other identity data that make it a high-value target. If an attacker can copy or ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

SOCRadar details E4del and PINHOLE RAT campaigns using FTP banners as dead drop resolvers to fetch commands and C2 details.

Nearly 2,000 hacked WordPress sites became infrastructure for the StopAndProtect malware operation, stealing crypto wallet ...

We found PavinLoader being used across ClickFix, fake software, and RenPy campaigns to deliver Amatera Stealer and other ...

Microsoft published a list of everything wrong with its own defaults.

China-linked backdoor QUICAgent breached Myanmar's government networks by routing spy traffic over QUIC - the encrypted ...

More than 600,000 voter files in Arizona’s largest county were hacked before the 2020 elections, with prosecutors refusing to pursue charges, according to declassified documents released Thursday. The ...

A criminal group that Check Point Research has dubbed StopAndProtect has been using nearly 2,000 poorly maintained WordPress ...

The campaign has affected hundreds of WordPress websites. Attackers plant a rogue must-use plugin, named in the format ...

An exposed open directory has revealed months of activity linked to a Russian-speaking affiliate of the Aurora ransomware ...