Cybersecurity Research

Read our researchers' latest original findings and threat analysis

Categories:

Featured Article

Threat Intelligence Report: Adversary-in-the-Middle and other phishing trends

Hoxhunt's Threat Intelligence Report shows concerning spike in MFA and session harvesting (AiTM) and illustrates other trends in phishing and human risk. Download the full report for free.

Read the article

Topics:

What CISOs & Security Awareness teams can learn from the 2024 Verizon DBIR

Petri Kuivala, long-time CISO and Advisor at Hoxhunt, has read every Verizon Data Breach Investigations Report (DBIR) going back 17 years. Get his perspective on the latest 2024 report.

Recreating the NSA's QuantumInsert attack technique

Pontus K. hacked together a DIY variation of the NSA's QuantumInsert attack technique. Be very afraid. Until ISPs fix some loopholes, it's a lethal potential attack.

Threat feed week 14: IT and HR Impersonations, and more phishing attacks

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 13:Starbucks, Microsoft, PayPal, Apple Pay, and more phishing attacks

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 10: EasyPark, eBay, Microsoft, Disney+ and other phishing scams

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 9: UPS, PostNord, Danske Bank, and more impersonations

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat Feed Week 6: Netflix, MetaMask, Geek Squad and other impersonations

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat Feed Week 5: Disney+, CXO, and HR Impersonations, and a Fake Invoice

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat Feed Week 4: Adobe Acrobat, Microsoft, Outlook impersonations and Credential Harvesters

Week 4 Threat Feed | Adobe Acrobat Sign, Microsoft & Outlook impersonations, local credential harvesters

Threat Feed Week 3: Netflix, QuickBooks, postal and banking impersonations

Week 3 Threat Feed | Netflix, QuickBooks, postal and banking impersonations

Threat Feed Week 2

Week 2 Threat Feed | Google, Microsoft, Outlook, Teams, DHL, and PostNord Impersonations

Threat Feed Week 1

Week 1 Threat Feed | Paramount, Netflix, and Apple Impersonations

Practical phishing and cybersecurity behavior trends for awareness leaders

Petri Kuivala is a CISO who made sure the Phishing and Cybersecurity Behavior Trends report avoids FUD and gives practical insights to awareness leaders

Threat Intelligence Report: Adversary-in-the-Middle and other phishing trends

Hoxhunt's Threat Intelligence Report shows concerning spike in MFA and session harvesting (AiTM) and illustrates other trends in phishing and human risk. Download the full report for free.

Insights From the Hoxhunt Cybersecurity Human Risk Benchmark

22% Of Phishing Attacks Used QR Codes in October. We Did a Benchmark Study To See if Users Were Able to Spot Phishing Attacks Using Them. Read the Results.

How I Used HOXINSERT in an Attack Vector Against OWA And Windows

Find Out How Our Offensive Security Engineer Used Their Version of QUANTUMINSERT, HOXINSERT, Against The Outlook Web App.

How I Created My Version of NSA’s AotS QUANTUMINSERT Attack

Learn About the AotS Technique, QUANTUMINSERT, Used by the NSA’s Tailored Access Operations (TAO). Then, Find Out How Our Offensive Security Engineer Created Their Own Variant Called HOXINSERT.

Adding Customization Features To Phishing Pages With Cloudflare Workers

Learn How Malicious Actors Use Cloudflare Workers To Build an On-The-Fly Custom Feature for Phishing Web Pages. Find Out How Our Offensive Security Engineer Figured It Out.

Gone Phishin' Volume 3: Early August, 2022

Your bi-weekly round-up of the biggest breaches, hacks, and cybersecurity SNAFUs.

Gone Phishing: Volume 2, late July 2022

Your bi-weekly roundup of the biggest news in phishing, malware, and cybersecurity.

Gone Phishin' - Phishing news round up for early July, 2022

Your biweekly media roundup about the wide world of phishing and cybersecurity.

5 Phishing Statistics for 2019 (with Infographic)

Phishing attacks and BEC losses are on the rise, and safe-looking sites are anything but safe. Some interesting phishing statistics from 2018.

See also :

Resource Hub Home