Suspected Russian cyber espionage groups are abusing legitimate authentication flows, including Google OAuth and WhatsApp device linking, to hijack accounts across Europe…
UNC7005, also known as Storm-2945, is a suspected Russian threat actor identified in February 2026. It targets academia, diplomatic, and nonprofit personnel…
CornFlake RAT is a Go-based remote access trojan deployed via adversary-in-the-middle (AitM) attacks, often disguised as browser or OS updates. It performs…
Lumen Black Lotus Labs, the threat research arm of Lumen Technologies, tracked the CaptiveCrunch campaign and raised the possibility of MSP compromise,…
Microsoft has disclosed a cyber espionage campaign, tracked as CaptiveCrunch, that abuses hijacked hotel Wi-Fi captive portals to deliver a remote access…
ReliaQuest, a cybersecurity company, documented the CaptiveCrunch campaign, which targets captive Wi-Fi portals to steal credentials via AitM attacks.