Skip to content
Threat Feed
Subscribe

Tag

Credential-Stuffing

3 briefs RSS
high threat

ShinyHunters Ransomware Group Claims icsecurity.com Victim, Exfiltrates 2.7M Records

The financially motivated ShinyHunters ransomware group, operating its shinysp1d3r RaaS, has claimed icsecurity.com as a new victim, compromising over 2.7 million records via credential stuffing and exploitation of cloud services like Snowflake, with the intent to extort through data leakage.

PoC Oracle E-Business Suite +9 ShinyHunters ransomware data-theft extortion cloud-security threat-actor-group credential-stuffing
2r 7t 2c 13i updated
medium advisory

Azure AD Failed Authentication Increase

Detects a significant increase (10% or greater) in failed Azure AD sign-in attempts, potentially indicating brute-force attacks, credential stuffing, or other unauthorized access attempts.

Azure Active Directory azuread brute-force credential-stuffing authentication
2r 1t
medium advisory

Okta Credential Stuffing Attempt Detection

This brief focuses on detecting credential stuffing attacks against Okta, characterized by multiple failed login attempts from a single source, potentially indicating automated attempts to compromise user accounts.

Okta credential-stuffing account-takeover
2r 1t