Thanks for sharing!

Additional loader C2s:
cdn-inform.]com
utm-adschuk.]com
utm-adsgoogle.]com
utm-adsname.]com
utm-advrez.]com
utm-msh.]com

twitter.com/esthreat/statu…

New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts - Bill Toulas
bleepingcomputer.com/news/security/…

bleepingcomputer.com/news/security/…

Sekoia researchers present an in-depth analysis of the Tycoon 2FA Phishing-as-a-Service (PhaaS) kit and the recent developments they spotted such as obfuscation, anti-detection capabilities and new network traffic patterns. blog.sekoia.io/tycoon-2fa-an-…

The latest version of #Tycoon 2FA enhances its obfuscation and anti-detection capabilities, and changes network traffic patterns.

Our blog post aims to present an in-depth analysis of Tycoon 2FA and detail the recent developments we spotted in the phishing kit.

We just released an analysis of the latest version of Tycoon 2FA Phishing-as-a-Service ( #PhaaS ), uncovered by the Sekoia TDR team in October 2023.

#Tycoon 2FA remains one of the most prevalent Adversary-in-The-Middle ( #AiTM ) #phishing kits in early 2024.

blog.sekoia.io/tycoon-2fa-an-…

🤝 Explore our first joint #CTI report by CERT Orange Cyberdefense World Watch team and Sekoia TDR team aimed at demystifying Residential Proxies #RESIP and highlighting their systemic growth and the transparency issues surrounding their sourcing

blog.sekoia.io/unveiling-the-…

🤝For the last months, our World Watch team collaborated with Sekoia.io TDR team to investigate and demystify Residential Proxies #RESIP and highlight their systemic growth and the transparency issues surrounding their sourcing ⤵️
orangecyberdefense.com/global/blog/re…

#cti Orange Cyberdefense

For those unfamiliar with the 'crypter' threat and its use by cybercriminals, I invite you to read our analysis on the subjet!

Crypters are essential for malware distribution.

Excellent and comprehensive paper by Livia!

⬇️

twitter.com/sekoia_io/stat…

🗝️ Navigate the crypters ecosystem with our latest report! Our analysts detail the functioning of these widely used software and explain how attackers leverage crypters to deliver malicious payloads at scale.

blog.sekoia.io/the-architects…

Sekoia closely monitors the activities of the pro-Russian threat group NoName057(16) since 2023.

Our Threat Detection & Research analysts published a comprehensive report on the significant advancements in their DDoS attack strategies and infrastructure.

blog.sekoia.io/noname05716-dd…

⏳Yesterday, Sekoia TDR team exposed a new infrastructure built after the #PredatorFiles publications, proving that the #spyware is still in use nowadays💥

blog.sekoia.io/the-predator-s…

EN | 🕵️‍♀️ Once again this year, strategic and industrial espionage is the threat that has most mobilised the ANSSI teams.

📚 Discover the 2023 edition of the Cyber Threat Overview: cert.ssi.gouv.fr/uploads/CERTFR…