Has anyone that's following #HuntersInternational figured out what the attack vector is yet? Is the group relying on exploits or phishing emails/droppers?
Has anyone that's following #HuntersInternational figured out what the attack vector is yet? Is the group relying on exploits or phishing emails/droppers?
Anyone using #zoom in the research or sensitive data space needs to pay close attention to the new terms of service. Avoid providing your company's sensitive data to AI.
Yesterday, LastPass announced that they were investigating a new breach and it was believed adversaries gained access using information collected from their August intrusion. Is it me, or does it sound like someone didn't fully clean up?
https://blog.lastpass.com/2022/11/notice-of-recent-security-incident/
Great write up by Elastic on the Google Workspace attack surface. Looking forward to parts 2 and 3 whenever they release.
https://www.elastic.co/google-workspace-attack-surface-part-one
PNG Steganography Hides Backdoor
Specifically, hiding #malware in PNG files (a type of image file).
Hey, I learned about this in security+