#proofpoint

Proofpoint details the Cruciferra crypter service that cloaks RATs and infostealers using BYOVD EDR tampering and 90+ custom encryption routines. #Cruciferra #Crypter #MaaS #BYOVD #ProcessGhosting #Infostealer #RAT #Proofpoint https://securityonline.info/cruciferra-crypter-service/?utm_source=mastodon&utm_medium=jetpack_social

Proofpoint ties TA488 and TA458 to half-click exploits and webmail zero-days that steal email from Ukrainian, NATO and US government mailservers. #HalfClickExploit #Zimbra #Roundcube #APT #Proofpoint https://securityonline.info/half-click-exploits-webmail/?utm_source=mastodon&utm_medium=jetpack_social

Proofpoint details OAuth client ID spoofing, a stealthy account enumeration technique that probes Microsoft Entra ID without a successful sign-in event. #OAuthSpoofing #EntraID #AccountEnumeration #CloudSecurity #Proofpoint http://securityonline.info/oauth-client-id-spoofing/?utm_source=mastodon&utm_medium=jetpack_social

UNK_MassTraction, a suspected China-aligned actor, exploits Roundcube webmail flaws to steal credentials and deploy the VShell backdoor at universities. #UNKMassTraction #Roundcube #VShell #CyberEspionage #Proofpoint #InfoSec http://securityonline.info/unk-masstraction-roundcube-vshell/?utm_source=mastodon&utm_medium=jetpack_social

The NovaCookies phishing service has emerged as a dangerous successor to Sneaky2FA, compromising numerous cloud accounts within healthcare sectors. #NovaCookies #Phishing #Cybersecurity #Malware #Proofpoint https://meterpreter.org/novacookies-phishing-service/?utm_source=mastodon&utm_medium=jetpack_social