Mamba 2FA: A new contender in the AiTM phishing ecosystem - Sekoia.io Blog
We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies. This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session. HubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. This cookie, provided by Marketo, has information (such as a unique user ID) that is used to track the user's site usage. The cookies set by Marketo are readable only by Marketo. Description is currently not available. No cookies to display. No cookies to display. Whoops! You have to login to access the Reading Center functionalities! Discover Mamba 2FA, a previously unknown adversary-in-the-middle (AiTM) phishing kit, sold as phishing-as-a-service (Pha
Mamba 2FA: A new contender in the AiTM phishing ecosystem - Sekoia.io Blog Log in Username or Email Address Password Remember Me Forgot password? Search the site... Search for All categories Threat Research & Intelligence Product News SOC Insights & Other News Detection Engineering Reset Threat Research & Intelligence Mamba 2FA: A new contender in the AiTM phishing ecosystem Discover Mamba 2FA, a previously unknown adversary-in-the-middle (AiTM) phishing kit, sold as phishing-as-a-service (PhaaS). Grégoire Clermont and Sekoia TDR October 7 2024 0 11 minutes reading Table of contents Introducti
saved by
related reading
- Responding to Adversary in the Middle attacksinvictus-ir.com
- Email Compromise To Mass Phishing Campaigndarktrace.com
- Shifting detection left for more effective threat detectionpushsecurity.com
- Common Oauth Apps Used in Business Email Compromise - Syne's Cyber Cornercybercorner.tech
- PerfectData Software Abuse and Account Takeover Risksdarktrace.com
- When MFA isn’t an option: The legacy of ROPC | Red Canaryredcanary.com
- Exposing and shutting down an inbox heist in actionredcanary.com
- Cloud coverage: Detecting an email payroll diversion attackredcanary.com
- The Soze Syndicate - Business Email Compromise Campaign | Todyltodyl.com
- Legacy authentication: The curious case of BAV2ROPCredcanary.com
- Threat actors misuse OAuth applications to automate financially driven attacksmicrosoft.com
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com