Tag: email

2 Attack Reports | 0 Vulnerabilities

Attack reports

Phishing actors exploiting complex routing scenarios and misconfigured spoof protections

Threat actors are leveraging complex routing scenarios and misconfigured spoof protections to send phishing emails that appear to be internal communications. These attacks, which have increased since May 2025, use various lures like voicemails, shared documents, and password resets to conduct crede…
phishing
credential theft
spoofing
financial scams
dkim
tycoon2fa
email
2026-01-07
dmarc
spf
Published: January 7, 2026
Downloadable IOCs: 4

New Tools and Techniques of ToddyCat APT

The ToddyCat APT group has evolved its methods to gain covert access to corporate email. The report details their use of PowerShell-based TomBerBil for extracting browser data, TCSectorCopy for copying Outlook OST files, and attempts to steal OAuth tokens from Microsoft 365 processes. These tools a…
apt
tomberbil
powershell
data theft
browser
oauth
outlook
2025-11-21
email
xstreader
tcsectorcopy
sharptokenfinder
Published: November 21, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports