How Huntress Detects and Responds to a ClickFix Attack
Huntress says ClickFix evades file-based EDR and describes endpoint rules that kill pasted commands in under a second.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #lolbin
OAuth Token Theft Through Microsoft's Front Door | Huntress
Huntress details a WWAHost.exe AppX sideloading technique that presents Microsoft's real OAuth login and harvests tokens that survive MFA.