Tag: reverse proxy

4 Attack Reports | 0 Vulnerabilities

Attack reports

DNS Uncovers Infrastructure Used in SSO Attacks

The threat actor leveraged Evilginx (likely version 3.0), an open source, advanced phishing adversary-in-the-middle (AITM, aka MITM) framework designed to steal login credentials and session cookies. Evilginx is widely used by cybercriminals to undermine multi-factor authentication (MFA) security, …

Published: December 3, 2025

Downloadable IOCs: 82

Fake GIF Leveraged in Multi-Stage Reverse-Proxy Card Skimming Attack

A sophisticated multi-stage carding attack on a Magento eCommerce website has been uncovered. The malware used a fake gif image file, local browser sessionStorage data, and a malicious reverse-proxy server to steal credit card data, login details, cookies, and other sensitive information. The attac…

multi-stage attack

javascript injection

Published: April 26, 2025

Downloadable IOCs: 0

A new version of Triada spreads embedded in the firmware of Android devices

Kaspersky researchers have discovered a new version of the Triada Trojan being distributed through infected Android device firmware. The malware is embedded into system files before devices are sold, making it nearly impossible to remove. It infects the Zygote process to compromise all apps on the …

credential theft

sms interception

Published: April 25, 2025

Downloadable IOCs: 0

RansomHub Affiliate leverages Python-based backdoor

A threat actor utilized a Python-based backdoor to maintain access to compromised endpoints, later deploying RansomHub encryptors across the impacted network. The malware, an updated version of a previously documented backdoor, features obfuscation, deployment via RDP, and unique indicators of comp…

lateral movement

python backdoor

c2 infrastructure

Published: January 16, 2025

Downloadable IOCs: 6

Click here to see more Attack Reports