Disclosing a New Vulnerability in JWT Secret Poisoning (CVE-2022-23529) 2023-1-9 22:0:49 | 阅读: 74 | 收藏 | Unit 42 - unit42.paloaltonetworks.com jwts payload

PurpleUrchin Bypasses CAPTCHA and Steals Cloud Platform Resources 2023-1-5 22:0:40 | 阅读: 13 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud github captcha libra

Navigating the Vast Ocean of Sandbox Evasions 2022-12-27 22:0:5 | 阅读: 17 | 收藏 | Unit 42 - unit42.paloaltonetworks.com evasions analysis memory hypervisor pocket

Threat Brief: OWASSRF Vulnerability Exploitation 2022-12-23 09:30:20 | 阅读: 60 | 收藏 | Unit 42 - unit42.paloaltonetworks.com owassrf powershell exchange cortex remote

Meddler-in-the-Middle Phishing Attacks Explained 2022-12-21 22:0:47 | 阅读: 19 | 收藏 | Unit 42 - unit42.paloaltonetworks.com phishing victim github microsoft kits

Russia’s Trident Ursa (aka Gamaredon APT) Cyber Conflict Operations Unwavering Since Invasion of Ukraine 2022-12-20 19:0:57 | 阅读: 13 | 收藏 | Unit 42 - unit42.paloaltonetworks.com trident ursa vbscript c2 ukraine

Digging Inside Azure Functions: HyperV Is the Last Line of Defense 2022-12-15 22:0:21 | 阅读: 9 | 收藏 | Unit 42 - unit42.paloaltonetworks.com machine prisma reverse microsoft cloud

Precious Gemstones: The New Generation of Kerberos Attacks 2022-12-12 22:0:49 | 阅读: 21 | 收藏 | Unit 42 - unit42.paloaltonetworks.com privileged sapphire forged diamond

Compromised Cloud Compute Credentials: Case Studies From the Wild 2022-12-9 07:0:23 | 阅读: 18 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud attacker compute phishing network

Vice Society: Profiling a Persistent Threat to the Education Sector 2022-12-6 19:0:2 | 阅读: 11 | 收藏 | Unit 42 - unit42.paloaltonetworks.com society vice ransomware hellokitty zeppelin

Blowing Cobalt Strike Out of the Water With Memory Analysis 2022-12-2 22:0:0 | 阅读: 14 | 收藏 | Unit 42 - unit42.paloaltonetworks.com memory x90 beacon cobalt loader

Threat Assessment: Luna Moth Callback Phishing Campaign 2022-11-21 19:0:27 | 阅读: 20 | 收藏 | unit42.paloaltonetworks.com attacker phishing victim extortion invoice

An AI Based Solution to Detecting the DoubleZero .NET Wiper 2022-11-19 10:0:13 | 阅读: 9 | 收藏 | unit42.paloaltonetworks.com wiper doublezero machine unmanaged malicious

Network Security Trends: May-July 2022 2022-11-16 22:0:59 | 阅读: 26 | 收藏 | unit42.paloaltonetworks.com network security remote attackers

Typhon Reborn With New Capabilities 2022-11-14 22:0:58 | 阅读: 10 | 收藏 | unit42.paloaltonetworks.com typhon reborn stealer analysis victim

Unit 42 Finds Three Vulnerabilities in OpenLiteSpeed Web Server 2022-11-10 22:0:11 | 阅读: 9 | 收藏 | unit42.paloaltonetworks.com litespeed remote alto

Cobalt Strike Analysis and Tutorial: Identifying Beacon Team Servers in the Wild 2022-11-3 21:0:35 | 阅读: 29 | 收藏 | unit42.paloaltonetworks.com beacon cobalt c2 probing fingerprint

Threat Brief: CVE-2022-3786 and CVE-2022-3602: OpenSSL X.509 Buffer Overflows 2022-11-3 09:0:10 | 阅读: 27 | 收藏 | unit42.paloaltonetworks.com cortex 3602 prisma overflow

Banking Trojan Techniques: How Financially Motivated Malware Became Infrastructure 2022-10-31 21:0:39 | 阅读: 19 | 收藏 | unit42.paloaltonetworks.com injection webinjects payload processes remote

Defeating Guloader Anti-Analysis Technique 2022-10-28 21:0:39 | 阅读: 12 | 收藏 | unit42.paloaltonetworks.com guloader analysis 0xcc python deobfuscate