Hackers Exploit Microsoft 365’s Direct Send Feature for Internal Phishing Attacks

Threat actors are leveraging Microsoft 365’s Direct Send feature to launch sophisticated phishing campaigns that mimic internal organizational emails, eroding trust and heightening the success rate of social engineering exploits. This feature, designed for unauthenticated relaying of messages from devices…

How to use the John the Ripper password cracker

<section class=”section main-article-chapter” data-menu-title=”What is John the Ripper?”> <h2 class=”section-title”><i class=”icon” data-icon=”1″></i>What is John the Ripper?</h2> <p>John the Ripper is an offline password cracking tool that was <a href=”https://www.openwall.com/lists/john-users/2015/09/10/4″ target=”_blank” rel=”noopener”>developed in 1996</a> by Openwall Project. It is notable for…

Blizzard Group’s ApolloShadow Malware Installs Root Certificates to Trust Malicious Sites

Microsoft Threat Intelligence has exposed a sophisticated cyberespionage operation orchestrated by the Russian state-sponsored actor tracked as Secret Blizzard, which has been actively compromising foreign embassies in Moscow through an adversary-in-the-middle (AiTM) technique to deploy the custom ApolloShadow malware. This…