Актуальные приманки/ресурсы/крео для корп ФИШИНГА

[BENT]

В этой теме делимся актульными приманками/крео/ресурсами где их постят

 

[TarBar]

Едва ли кто-то будет делиться чем-то актуальным. Задай тренд - поделись первым)

 

[BENT]

Ready To Click That OneDrive Invoice Link? Not So Fast | AppRiver
Recently we posted a blog discussing all the methods Emotet uses to dupe end users. And, wouldn't you know it, the malicious actors are getting even more bold - using Microsoft OneDrive links in hopes of catching someone with their guard down to click the malicious files.
appriver.com
Elliot on Security - Creating Fully Undetectable JavaScript Payloads to Evade Next-Generation Firewalls
Generate evasive JavaScript for bypassing next-generation firewalls and antivirus scanners in a few simple clicks...
elliotonsecurity.com
Navigating Embedded Payload Extraction from RDP Files – Defence evasion -
Introduction This blog post will explore how to embed malicious payload into the RDP configuration file. By leveraging the innate properties of the file extensions and specific RDP configuration parameters, I have successfully injected malicious content without impeding the file's intended...
0xsp.com