Category: Tacklebox
The Tacklebox is your one-stop reference guide to unraveling the intricate world of scams and fraudulent schemes. This comprehensive resource is designed to equip you with the knowledge and insights needed to recognize, understand, and protect yourself against various types of scams and social engineering tactics.
-
Active Exploitation of Sangoma Switchvox CVE-2026-9586
Exploration of active exploitation attempts using the unauthenticated SQL injection vulnerability in Sangoma Switchvox, leading to remote code execution.
-
Exploiting Sangoma Switchvox CVE-2026-9586: SQL Injection and Remote Code Execution
An in-depth look at the exploitation of CVE-2026-9586, an SQL injection flaw in Sangoma Switchvox leading to remote code execution. Detailed attack scenario and operator…
-
Guildma (Astaroth) Malware: A New Wave of Infection via Brazilian Portuguese Emails
An analysis of Guildma malware’s infection vector using Brazilian Portuguese emails, highlighting its techniques and efficiency in spreading.
-
Guildma: Analyzing Astaroth Malware Deployment via Brazilian Portuguese Emails
Explore the Guildma threat operation that delivers Astaroth malware through realistic Brazilian Portuguese email spear phishing.
-
Exploiting PaperCut NG/MF Vulnerabilities in Phishing Campaigns
Explore how attackers exploit PaperCut NG/MF vulnerabilities in phishing campaigns to gain unauthorized access.
-
Polymorphic Phishing Page Observed with Self-Destructive Tendencies
Explore a new technique in phishing: polymorphic pages that occasionally self-destruct, highlighting evolving tactics and their operational challenges.
-
Case Study: The Impact of Polymorphic Phishing Pages Breaking Themselves
Analyzing a polymorphic phishing campaign that compromised itself, revealing insights into the construction and pitfalls of adaptable phishing pages.
-
Polymorphic Phishing Page: A Self-Breaking Attack Pattern
Explore a polymorphic phishing attack that occasionally self-breaks. Discover how this affects its detection and effectiveness.
-
Polymorphic Phishing Pages Observed in the Wild: A Recent Case Study
Dive into a recent phishing campaign using polymorphic pages to evade detection, with insights into its construction and operation.
-
Exploiting Gitea Code Injection Vulnerability (CVE-2026-60004) in Phishing Attacks
Exploring how the Gitea code injection vulnerability (CVE-2026-60004) can be used in phishing attacks to exploit human and technical weaknesses.
-
Obfuscating IP Addresses in Phishing Attacks: Recent Campaign Trends
Explore how obfuscating IPs as hostnames in phishing attacks exploits SSRF vulnerabilities, bypassing filters and evading detection.
-
DOUBLECUP Campaign: Exploring the Use of PNG Payloads
Examine the DOUBLECUP campaign’s use of PNG files as payload carriers, utilizing a steganography-like method to evade detection.
-
CVE-2026-72530: Exploiting TrueConf Server Code Injection Vulnerability
Explore the CVE-2026-72530 vulnerability in TrueConf Server, revealing the methods and impacts of unauthorized code execution via crafted scripts.
-
CVE-2026-73570: Leveraging Zimbra Command Injection Vulnerability in Phishing Attacks
Explore how CVE-2026-73570 affects Zimbra and its exploitation in phishing campaigns, gaining unauthorized access through SMTP request manipulation.
-
CVE-2026-19478: Exploiting GitLab GraphQL Directive Code Injection
Explore how CVE-2026-19478 enables code injection in GitLab, allowing unauthorized modification of projects and data through GraphQL directives.
-
Exploiting MLflow SSRF Vulnerability: Emerging Attack Techniques
Explore the exploitation of MLflow’s SSRF vulnerability (CVE-2026-64849) with real-world attack examples and operator insights.
-
Exploiting Cloud Metadata Services for Credential Theft: Current Tactics
Explore how threat actors exploit cloud metadata services via REST API endpoint 169.254.169.254 for credential theft.
-
Exploiting Metabase SQL Injection: Current Threat Actor Campaign Patterns
An in-depth look at the exploitation of Metabase SQL Injection vulnerability by threat actors, detailing methods and impacts on organizations.
-
Metabase SQL Injection Vulnerability in Real-World Phishing Campaigns
Explore how attackers utilize the CVE-2026-72898 vulnerability in Metabase to steal data in modern phishing operations.
-
Metabase Pre-Authentication SQL Injection Exploitation: A Current Threat Landscape
Explore the Metabase pre-authentication SQL injection vulnerability and its exploitation in active campaigns, impacting application configurations and data security.