3 casos · pág. 1/1
Huntress argues that passkeys raise the bar for authentication but do not close the account lifecycle: attackers still target enrollment, recovery, compromised endpoints, alternative sign-in flows and social engineering. Huntress researchers tracked a device-code phishing campaign, EvilTokens, that hit 344 organizations across five countr…
Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…
Huntress analysts presented findings on three recently staged phishing kits that target Microsoft 365 authentication tokens, as part of its October Tradecraft Tuesday series. The kits include EvilTokens, a device-code phishing campaign that abused the Railway PaaS for token harvesting and replay, and the Kali365 control panel, described a…
