threat hunting

8 posts tagged with "threat hunting"

Hunting New C2 Frameworks - Part 2 - Nexus C2, Shipped with Creds

May 10, 2026

A deep dive into a newly discovered C2 framework, Nexus C2 — its features, operational flaws, and the implications of AI-generated malware in the wild.

Threat Hunting C2 threat hunting malware

Hunting New C2 Frameworks

May 5, 2026

A look at hunting C2 frameworks in the wild, including identifying a previously unknown C2 framework.

Threat Hunting C2 threat hunting malware

Device Code Phishing Campaign — Infrastructure Update

Mar 18, 2026

A follow-up investigation mapping 1,337 phishing URLs across 326 workers.dev hostnames, confirming a PhaaS multi-tenant architecture, encrypted client-side payloads, and new lure variants targeting Adobe, DocuSign, and Outlook branding.

Threat Hunting entra microsoft threat hunting

Uncovering a New Device Code Phishing Campaign

Mar 10, 2026

Uncovering a phishing campaign abusing Microsoft Device Code Authentication and Cloudflare Worker Pages, with detection hunts for Entra and Microsoft 365.

Threat Hunting entra microsoft threat hunting

Hunting Malicious NPM Packages with AI

Mar 6, 2026

A look into automating the hunt for malicious NPM packages, using AI for package review.

Threat Hunting npm malware threat hunting

ConsentFix: A New way to Phish for Tokens

Dec 17, 2025

A look at a new phishing campaign, ConsentFix which utilises click-fix style techniques to steal auth tokens.

Threat Hunting entra microsoft threat hunting

Microsoft Entra Token Theft - Part One: Offline Access and Conditional Access

Dec 12, 2025

A walkthrough of different Token Theft Scenarios with Detections

Threat Hunting entra microsoft threat hunting

A Guide to Threat Hunting in a SOC

Jun 28, 2021

A practical guide to implementing threat hunting in a SOC environment and moving beyond reactive detection

Guides Threat Hunting threat hunting soc mitre