OWAReaper: JavaScript Browser-Based Implant for Microsoft OWA
A sophisticated JavaScript backdoor deployed via half-click exploits targeting Microsoft OWA, capable of persistent mailbox access, credential theft, and data exfiltration via…
Tag: persistent access
Cloudflare Tunnel: Used for Persistent Access in Potemkin Campaign
Cloudflare tunnel was set up by threat actors in the Potemkin campaign to maintain persistent access to compromised systems.
Tailscale: VPN Service Used for Persistent Access
Tailscale is a VPN service that creates encrypted mesh networks. The Poisson operator used it to maintain persistent access to a compromised…