Unit 42 (@Unit42_Intel) / X

Unit 42

3,024 posts

Unit 42

@Unit42_Intel

The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.

unit42.paloaltonetworks.com

Joined December 2015

Unit 42
@Unit42_Intel
15h
We analyzed an AI enabled hacking campaign by a Chinese-speaking threat actor. The adversary targeted infrastructure across seven vulnerabilities, combining autonomous AI driven enumeration with manual exploitation. Read our analysis: bit.ly/4xg1bP2
Unit 42
@Unit42_Intel
Jul 29
15-plus risky Chrome productivity extensions bundle an SDK that turns a browser into a covert web-crawling proxy. No mention of crawling in CWS description but a limited disclosure as an opt-in popup after installation. Details at: bit.ly/4gZw3hK
Unit 42
@Unit42_Intel
Jul 24
Four evasion techniques deliver stealthy device code phishing: blob URLs evade network analyzers, custom CAPTCHA gates block URL scanners, SaaS multi-step flows bypass domain reputation checks, plus source-code evasion. Details at bit.ly/4wZQGPs
Unit 42
@Unit42_Intel
Jul 24
New #Rhadamanthys #infostealer campaign seen following Global Law Enforcement infrastructure takedown. Attackers impersonated the RingCentral site by using web pages illegally copied from the publicly-available legitimate RingCentral download site. More: bit.ly/3T8zxEV
Unit 42
@Unit42_Intel
Jul 23
RubyGems cryptojacking campaign: 113-plus malicious RubyGems found delivering XMRig miners via trojanized libraries, using delayed persistence and direct launchers. Details at bit.ly/4frpVwd
See @Unit42_Intel's full profile
Sign up
Log in

See @Unit42_Intel's full profile

See @Unit42_Intel's full profile