Cyber Intrusions

Cybersecurity incidents involving phishing-driven credential theft and malware delivery, plus exploitation of exposed services and removable-media infections, with associated IOCs and attacker TTPs.

List of reports related to this topic

Search by title

	Title
	Benefits Enrollment Email Used to Deliver Remote Access Payload
	Cloud Account Credential Harvesting Through Spoofed Document Sharing Portal
	Cloud Storage Quota Warning Used to Hijack User Sessions
	Credential Harvesting Against Cloud Email Accounts Using Adversary-in-the-Middle Toolkit
	Customer Complaint Email Used to Distribute Embedded HTML Credential Form
	DocuSign-Themed Phishing Email Capturing Corporate Credentials
	Domain Spoofing and Malicious PDF Delivery in Executive Impersonation Campaign
	Executive Impersonation Email Delivering Malicious PDF Link
	Exploitation of Public-Facing Web Application Leading to Web Shell Deployment
	Fake Software Update Page Delivering Credential-Stealing Malware
	Fake Voicemail Notification Delivering HTML Smuggling Payload
	Fraud Alert Phishing Email Redirecting Users to Banking-Themed Credential Trap
	Internal IT Helpdesk Spoof Used to Steal VPN Credentials
	Invoice-Themed Phishing Email Delivering Macro-Enabled Spreadsheet
	Malware Beaconing from Engineering Workstation to Suspicious VPS Infrastructure
	Meeting Invite Phishing Campaign Using OneNote Attachment
	MFA Expiration Warning Used in Cloud Credential Harvesting Campaign
	Multi-Stage Intrusion Using Vulnerable VPN Appliance and Custom Backdoor
	Password Reset Notification Used for Identity Platform Credential Theft
	Payroll Review Phishing Campaign Targeting Human Resources Staff
	phishing campaign
	Phishing Email Delivering Macro-Enabled Spreadsheet for Payroll Fraud
	Procurement Quote Request Phishing Attachment Delivering Infostealer
	Ransomware Deployment After VPN Credential Abuse and Internal Reconnaissance
	Ransomware Intrusion Following Exposed RDP Service
	Secure Fax Notification Delivering LNK-Based Malware Loader
	Shared Document Phishing Lure Harvesting Cloud Credentials
	Shipping Notification Phishing Email Delivering Archive with Malware Loader
	Supplier Payment Inquiry Used as Phishing Credential Theft Lure
	Suspected Phishing Campaign Targeting Finance Team with Invoice Lures
	Suspicious USB-Borne Malware Infection in Isolated Operational Environment
	Tax Document Phishing Campaign Leveraging Password-Protected Archive
	Travel Policy Update Phishing Email Impersonating Corporate Operations
	Web Shell Activity on Internet-Facing Support Portal Followed by Archive Collection