mastodon 4.8.0-alpha.3+glitch@volatility@infosec.exchange Core Dev | Art of Memory Forensics co-author | #DFIR trainer and enthusiast | Director of Adversary Tactics at @huntress@infosec.exchange
We've seen quite a few of these phishing kits popping up lately. Here's some insight into one called Knight Office. Analysis by Andrea Hatcher, @threatresearch@infosec.exchange @tanner@infosec.exchange and @LindseyODWelch@infosec.exchange from @huntress@infosec.exchange
https://www.huntress.com/blog/inside-knight-office-m365-aitm-attack
NEW RMM TRADECRAFT: In the last few weeks Huntress has observed a notable pattern across multiple customer environments: rogue ScreenConnect clients repeatedly spawning the Windows Script Host to execute a series of four Visual Basic Script files.
https://www.huntress.com/blog/rogue-screenconnect-installations
Watching Andrew (Spike) Brandt (@threatresearch@infosec.exchange) from @huntress@infosec.exchange talking about the various Remote Management Tools (RMMs) that attackers abuse these days at booth 1845
@xabean@infosec.exchange @threatresearch@infosec.exchange @huntress@infosec.exchange you’re too kind Richard 💜
We’re hiring a technical writer for my team here at @huntress@infosec.exchange in case anyone is interested! Feel free to reach out with questions 😃
The @huntress@infosec.exchange 2025 Threat Report is now live and it is a doozy!!! Make sure to check out the great work that @Laughing_Mantis@mastodon.social and team have done 👏and gain insights into what’s going on from our view!! 🥳🎉🥳🎉🥳🎉
It’s raining, and feeding time, so what do we do? Sheep and goat dance set!!!
💣💥 turn up the volume! 🔊🔊
Have a good weekend!