/
data_types_exposed:credentials × latest_source_host:huntress.com × criticity:high × limpar

Resultados

2 casos · pág. 1/1

huntress.com · high

Fake WatchGuard VPN site watchguard-vpn[.]net harvests VPN credentials, then serves the genuine signed installer

Huntress analyzed an active credential-phishing campaign in which the lookalike domain watchguard-vpn.net harvests WatchGuard SSL VPN credentials. On October 7, 2026, an administrator at a managed service provider searched Bing for "watchguard vpn sll download" and clicked through to the fake page, which Huntress classifies as SEO poisoni…

managed service providers technology
huntress.com · · 2 fontes · 2 atualizações high

Amazon-themed ClickFix malvertising abuses finger.exe to deliver Doina, Lumma Stealer and NetSupport RAT

A ClickFix malvertising campaign uses sponsored Google results for "amazon business" to lure victims to a fake Amazon login page on Google Sites and then to a fake CAPTCHA. The CAPTCHA pastejacks a command into the clipboard that the victim is told to run in the Windows Run box. The command abuses the legacy finger.exe utility to fetch a …