4 threads tagged with “unit42”
Palo Alto Networks Unit 42 details active exploitation of CVE-2025-59287, including process chains indicating cmd.exe and powershell.exe spawned by wsusservice.exe/w3wp.exe, and exfiltration to Webhoo…
Category: Threat Alerts / Vulnerabilities & Exploits / Vulnerabilities & Exploits
Palo Alto Networks’ Unit 42 released a detailed report on AzureHound, a discovery tool designed to map and audit Azure Active Directory environments. While intended for security auditing, threat actor…
Category: Intelligence / Cloud Security / Cloud Discovery
Unit 42 researchers have attributed over 194,000 malicious domains to a China-linked group known as the Smishing Triad. The campaign leverages disposable infrastructure hosted primarily on U.S. cloud …
Category: Threats / Mobile Security / Phishing
Palo Alto Networks Unit 42 tracks Scattered LAPSUS$ Hunters’ extortion activity after their Oct 10 deadline, observing leaks tied to six companies and chatter about an Extortion‑as‑a‑Service model wit…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence