#huntress
-
Hackers Hid the khunt Toolkit Inside an Oracle Database
Through an SQL injection, attackers planted a post-exploitation kit directly inside an Oracle database, compiling it as a Java object. The technique, according to Huntress, is spotted extremely rarely in real-world attacks.
-
DevMan Turned Extortion Into SaaS: A Single Portal for Affiliates
Switzerland's PRODAFT has described the web platform of the DevMan group, where affiliates build malicious payloads, negotiate with victims and collect payouts. A separate thread became the scandal around a Huntress employee who leaked FBI inquiries to the extortionists.