Vendor

Vultr

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 20, 2026 · last 7d ago

Timeline2 articles

BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials

CloudSEK researchers found the BigBear 2.0 PhaaS kit, built on Evilginx2, has stolen over 5,100 Microsoft 365 credentials across 461 organizations in 40+ countries.

CloudSEK gained admin access to the BigBear 2.0 phishing-as-a-service panel, an Evilginx2-based adversary-in-the-middle platform operated by someone using the alias 'General Boss'. The team observed 3,331 unique victim IPs across more than 40 countries, 42 VPS nodes mostly on Vultr, and 5,137 credential records across 461 organizations, including 4,148 session cookies, 1,032 plaintext passwords, and 474 completed MFA-bypassed authentications. IT and managed service providers were the most targeted sector, raising supply-chain risk since their compromise can expose client infrastructure and privileged Azure AD access.

Infosecurity MagazineSep 8, 09:45 UTC · 7d agoPhishing & fraud in the wild

Cybersecurity jobs available right now: June 30, 2026

Help Net Security lists cybersecurity job openings across the US, UAE, France, Israel, Japan, Ireland, India, and Canada at major employers.

The roundup includes roles such as AI Offensive Security Engineer at AGAPI, Cloud Security Engineer at Spotify, IAM Engineer at Proton, DFIR in Israel, and a Senior Inspector overseeing NIS2 and AI regulation compliance in Ireland. Most listings were marked as no longer accepting applications, with a few still open including DFIR at Cye, IAM Engineer at Proton, and Detection Engineering at Saronic. The list covers employers across finance, infrastructure, and technology sectors.

Help Net SecurityAug 20, 10:38 UTC · 26d agoIndustry1

Appears with

threat actor General Boss 1 malware BigBear 2.0 1 malware Evilginx2 1 organization Cye 1 organization Help Net Security 1 organization Interactive Brokers 1 organization Saronic Technologies 1 organization Veolia 1 product Azure AD 1 product Microsoft 365 1 vendor CloudSEK 1 vendor Lumafield 1 vendor Microsoft 1 vendor Proton 1 vendor Spotify 1 vendor Synchrony 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.