Chromecookiestealer – Steal/Inject Chrome Cookies Over The DevTools Protocol
Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON objects using Chrome’s own format. The same format is used for cookies t…
S4UTomato – Escalate Service Account To LocalSystem Via Kerberos
Escalate Service Account To LocalSystem via Kerberos. Traditional Potatoes Friends familiar with the “Potato” series of privilege escalation should know that it can elevate service account privileges to local system privileges. The early exploitati…
North Korea’s Lazarus Group Launders $900 Million in Cryptocurrency
As much as $7 billion in cryptocurrency has been illicitly laundered through cross-chain crime, with the North Korea-linked Lazarus Group linked to the theft of roughly $900 million of those proceeds between July 2022 and July of this year.
“As traditi…
Multi-factor authentication has proven it works, so what are we waiting for?
Categories: News Categories: Personal Amazon has announced it will require all privileged AWS to use MFA in the near future. Let’s hope others follow. |
The post Multi-factor authentication has proven it works, so what are we waiting for? appeared first on Malwarebytes Labs.
Amazon Prime email scammer snatches defeat from the jaws of victory
Categories: News Categories: Scams A very convincing Amazon Prime scam landed in our mail server today and…went straight to spam. Here’s why. |
The post Amazon Prime email scammer snatches defeat from the jaws of victory appeared first on Malwarebytes Labs.
Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike
Threat actors have been observed targeting semiconductor companies in East Asia with lures masquerading as Taiwan Semiconductor Manufacturing Company (TSMC) that are designed to deliver Cobalt Strike beacons.
The intrusion set, per EclecticIQ, leverage…
NetAnalysis® v3.6 and HstEx® v5.6 Released
Release Notes for NetAnalysis® Version 3.6
Welcome to NetAnalysis® Version 3.6. We are excited to present this latest update, packed with new features and improvements to enhance your browser data, forensic analysis experience. New in this…
Caracal – Static Analyzer For Starknet Smart Contracts
Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb …
New OS Tool Tells You Who Has Access to What Data
Ensuring sensitive data remains confidential, protected from unauthorized access, and compliant with data privacy regulations is paramount. Data breaches result in financial and reputational damage but also lead to legal consequences. Therefore, robust…