Distributed Workforce

The attack technique leverages weakly-validated XPC connections and the injection of malicious payloads into application Interface Builder files.

The campaign, involving nearly 8.9 million email addresses and linked to Romanian threat actors, utilized a compromised Bolivian government website to host the fraudulent Boots checkout page.

GhostTree leverages NTFS junctions, a file system feature that allows one directory to point to another.

The approximately 150-day espionage campaign incrementally exfiltrated emails to cloud services.

Doppel Email Security utilizes autonomous agents and its Doppel 360 Threat Graph to investigate threats within the inbox.

Teams can mitigate BECs by better understanding their company’s attack profile.

The new feature automatically disconnects compromised endpoints from the network, limiting the risk of further impact while maintaining connectivity to the Defender for Endpoint service for continued monitoring.