Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware

  The Hacker News

  T1684.001 96% T1021.006 95% T1566.004 83%
  2026-04-23
• Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

  Microsoft Security Blog

  T1021.006 99% T1059.003 92% T1059.001 76%
  2026-04-18
• Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape

  Mandiant

  T1486 100% T1219 100% T1112 99%
  2026-03-16
• Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

  Mandiant

  T1021.001 99% T1021.006 99% T1649 93%
  2026-03-06
• Apache ActiveMQ Exploit Leads to LockBit Ransomware

  The DFIR Report

  T1190 100% T1021.001 100% T1486 99%
  2026-02-23
• Dealing with Imperfect Telemetry | Huntress

  Huntress

  T1021.006 79% T1654 77% T1078.001 58%
  2025-10-21
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• How Huntress Addresses Lateral Movement

  Huntress

  T1021.001 97% T1003.001 92% T1021.006 92%
  2025-06-12
• Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

  The DFIR Report

  T1003.001 100% T1021.001 99% T1021.002 99%
  2025-05-19
• Untold Tales from Tactical Response | Huntress

  Huntress

  T1078 92% T1021.006 86% T1059.001 82%
  2025-03-10
• Evicting the Adversary | Huntress

  Huntress

  T1021.001 99% T1021.006 99% T1078 67%
  2022-05-10