Tag: multi-factor authentication

3 Attack Reports | 0 Vulnerabilities

Attack reports

Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations

This analysis focuses on UNC6040, a financially motivated threat group specializing in voice phishing campaigns targeting Salesforce instances. The group employs social engineering tactics to trick employees into granting access or sharing credentials, facilitating large-scale data theft and extort…
social engineering
voice phishing
data exfiltration
multi-factor authentication
detection
salesforce
2025-10-01
access control
logging
identity verification
data loader
connected apps
Published: October 1, 2025
Linked vulnerabilities : CVE-2025-53690
Downloadable IOCs: 2

Welcome to the party, pal!

This end-of-year newsletter discusses cybersecurity trends and personal anecdotes. It emphasizes the importance of multi-factor authentication and password management, highlighting the prevalence of identity-based attacks. The author shares a story about introducing hardware tokens to family member…
multi-factor authentication
password management
badbox
2024-12-19
vulnerability research
trojan/win32.coinminer.r174018
hardware tokens
identity-based attacks
win.worm.bitmin-9847045-0
w32.file.malparent
win32.trojan-stealer.petef.fpskk8
malware detection
coinminer:mbt.26mw.in14.talos
Published: December 19, 2024
Downloadable IOCs: 5

Mamba 2FA: A new contender in the AiTM phishing ecosystem

Mamba 2FA is a newly discovered adversary-in-the-middle (AiTM) phishing kit being sold as phishing-as-a-service (PhaaS). It features capabilities similar to other popular AiTM phishing services, including handling two-step verifications for non-phishing-resistant MFA methods, supporting various aut…
phishing
aitm
phaas
microsoft 365
evasion techniques
2024-10-07
socket.io
multi-factor authentication
mamba 2fa
Published: October 7, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports