Tag: certificate rotation

1 Attack Reports | 0 Vulnerabilities

Attack reports

Cyberhaven Extension Compromise: TLS Certificates Reveal Hidden Infrastructure

A phishing attack targeting a Cyberhaven employee led to the compromise of their Google Chrome extension. The attacker published a malicious version on the Chrome Web Store, active for 24 hours, capable of exfiltrating cookies and session data. Analysis of IP addresses and domains revealed connecti…
phishing
chrome extension
domain spoofing
2025-01-10
certificate rotation
Published: January 10, 2025
Downloadable IOCs: 66
Click here to see more Attack Reports