Intro

This article will show you how to execute our shellcode into another process. This article is part of a series, if you haven’t read the…

Background

This is a simulation of attack by (Venomous Bear) APT group targeting U.S.A, Germany and Afghanista attack campaign was active since at…

This is a simulation of attack by (Labyrinth Chollima) APT group targeting victims working on energy company and the aerospace industry…

This is a simulation of attack by (Mustang Panda) APT group targeting government entities in Southeast Asia, the attack campaign was active…

Hello, I am Ahmad Renaldy Priono, a Cybersecurity Analyst, Malware Developer, and APT Analyst. This time, I will discuss Adversary…

In this video, Michael Allen discusses how to test Adversary-in-the-Middle attacks without using hacking tools. He delves into the intricacies of credential harvesting, the evolution of multi-factor authentication (MFA), and how attackers adapt their strategies…

This is a simulation of attack by the Wicked Panda group (APT-41) targeting U.S. state government networks the attack campaign was active…

Tl;dr — I could not get covenant working, so I decided to create a custom command and control (c2) framework from scratch…

By Vivek Bhatt | Offensive Security Analyst | Red Teaming & Adversary Simulation Specialist

In today’s cyber landscape, attackers no longer need brute force or flashy exploits to infiltrate your systems. Sometimes, they just need a…

Microsoft reveals Russian state actor Secret Blizzard is targeting foreign embassies in Moscow with ISP-level AiTM attacks, deploying ApolloShadow malware to spy on diplomats.

A new advanced phishing kit, PoisonSeed, bypasses MFA with AitM techniques to steal credentials and launch cryptocurrency scams. NVISO uncovers the tactics.