Category: Tacklebox
The Tacklebox is your one-stop reference guide to unraveling the intricate world of scams and fraudulent schemes. This comprehensive resource is designed to equip you with the knowledge and insights needed to recognize, understand, and protect yourself against various types of scams and social engineering tactics.
-
Leveraging Anthropic’s Mythos for Cryptographic Weakness Exploitation in Rejetto HFS
Exploring how Horizon3 used Anthropic’s Mythos to exploit Rejetto HFS vulnerabilities and achieve remote code execution.
-
Citrix NetScaler ADC and Gateway Authentication Bypass Vulnerability Exploitation
Explore how CVE-2026-19490 enables authentication bypass in Citrix NetScaler ADC/Gateway, with insights into its exploitation and what red teamers can adapt.
-
A Closer Look at Malware From the Macfinger ClickFix Campaign
Analyzing the Macfinger ClickFix Campaign’s latest malware tactics, revealing how it evades current security controls.
-
Macfinger ClickFix Campaign: Dissecting New Malware Developments
An in-depth analysis of the Macfinger ClickFix Campaign, exploring its construction, effectiveness, and lessons for security practitioners.
-
Unpacking the Macfinger ClickFix Campaign: New Malware Tactics
Explore the Macfinger ClickFix campaign’s malware tactics and evasion techniques in phishing operations. Uncover how links and evasions bypass security controls.
-
Analyzing the Macfinger ClickFix Campaign: A Recent Wave of Targeted Phishing Attacks
Explore the Macfinger ClickFix campaign, a sophisticated phishing operation, its TTPs, and what red teamers can learn from it.
-
One URL, Three Different Tricks: Confounding Security Controls in Phishing
Explore a phishing email with a complex URL designed to bypass security controls. Break down the techniques and understand its effectiveness.
-
Macfinger ClickFix Campaign: Analyzing Recent Phishing Techniques
Analyze the Macfinger ClickFix phishing campaign: methodology breakdown, its success factors, and operator insights for replication.
-
TerminalFix Malware Campaign: PNG Steganography in Action
Explore TerminalFix’s ingenious use of PNG steganography to mask data and establish reverse tunnels in multistage cyber intrusions.
-
TerminalFix: Unveiling the PNG Steganography in Contemporary Cyber Campaigns
Explore TerminalFix’s use of PNG steganography for payload delivery, examining how image files concealed malicious code.
-
LausivLoader: Unpacking a New Multi-Stage Malware via Malspam
Dissecting LausivLoader, a multi-stage malware recently identified in a deceptive malspam campaign impersonating legitimate businesses.
-
LausivLoader: A Deep Dive into Multi-Stage Malware via Malspam
Explore the LausivLoader malware, its sophisticated multi-stage delivery mechanism, and the impersonation tactics it employs to enhance social engineering efficacy.
-
LausivLoader: Insights into a Multi-Stage Malware Operation via Malspam
An in-depth analysis of LausivLoader malware operation, examining malspam-based multi-stage execution.
-
LausivLoader: Examining a Targeted Malspam Campaign
Dive into the LausivLoader malspam campaign, exploring its execution and methods for data transmission between malware stages.
-
Exploiting ConnectWise ScreenConnect: Unauthorized Remote Session Attacks
Understand how attackers exploit vulnerabilities in ConnectWise ScreenConnect to conduct unauthorized remote sessions and what makes their techniques effective.
-
Understanding the Cisco Secure Email Gateway SQL Injection Vulnerability Campaign
A deep dive into the exploitation campaign targeting CVE-2026-76461, a SQL injection vulnerability in Cisco’s Secure Email Gateway.
-
Redtail: Analyzing the Latest Phishing Payload Patterns
Explore the latest phishing payload strategies in the Redtail campaign, detailing how threat actors maximize engagement through sophisticated tactics.
-
Understanding the Self-Expanding Stolen Inference Supply Chain Campaign
Explore the self-expanding stolen inference campaign exploiting LLM resale gateways, blending web vulnerabilities and AI implications.
-
The Self-Expanding Stolen Inference Supply Chain Leveraging AI Agents
Explore how attackers use AI agents to exploit LLM resale gateways, creating a sophisticated supply chain threat.
-
The Self-Expanding Stolen Inference Supply Chain Leveraging AI Agents
Explore how adversaries exploit AI coding agents to infiltrate LLM resale gateways, harvesting inference capacities via web vulnerabilities and account farming.