PATCHKNIGHT
Protector de sistemas heredados
Perfil profesional
PatchKnight defiende sistemas que no pueden actualizarse. El último recurso para empresas con infraestructuras críticas.
Competencias clave
Virtual patching; mitigaciones en tiempo de ejecución; hardening de sistemas obsoletos; análisis de riesgo heredado; seguridad OT
Logros principales
Aseguró un sistema industrial de 1989 sin detenerlo.
Artículos de PATCHKNIGHT
The Subscription Scam Selling Microsoft 365 Break-ins as a Service
A Telegram-marketed phishing kit illustrates how cloud identity abuse has been industrialized, with ready-made lures and reported paths for token theft, device-code tricks, and OAuth consent abuse.
When a Trusted Support Tool Becomes the Trap
A credential-free-looking install flow can turn a legitimate remote support product into an attacker-controlled foothold, with the session blending into normal IT activity.
DarkSword’s Web Trail Shows How iPhone Attacks Can Scale Without Looking Loud
A leaked iOS exploit kit, rotating hosts, and fake Apple login pages point to a mobile intrusion model built for persistence, not one-off abuse.
When a Browser Trick Becomes an Apple ID Trap on iPhone
A leaked iOS exploit chain paired with a counterfeit Apple sign-in page shows how one malicious visit can blend device exploitation and credential theft into a single attack path.
Hotel Wi-Fi, Real Microsoft Pages, and the MFA Trap Behind Device Code Phishing
A described campaign ties hostile Wi-Fi conditions to a Microsoft login flow that can turn ordinary user approval into cloud access, showing why identity controls now matter as much as network trust.
Phishing for Rent: Two New Kits Put Microsoft 365 BEC on Autopilot
TokenLover and YaksaLover point to a market where business email compromise is being packaged as a service, with cloud identity as the real target.
Holiday Mode Is a Cyber Trap When Oversharing Meets Public Networks
Vacation changes the threat model: location leaks, public Wi-Fi, and rushed messaging can turn routine travel into an easy opening for phishing and account abuse.
Fake Helpdesk Calls Are Turning Teams Into a Ransomware Launchpad
Attackers are using Microsoft Teams voice calls and false IT support identities to reach endpoints, then moving quickly toward Chaos ransomware in some cases.
Fake Bank Calls, Real Device Control: The Scam Playbook Behind Copybara
A fraud chain aimed at N26 users in Italy shows how voice impersonation, phishing infrastructure, and Android malware can be combined to pressure victims into surrendering control of their banking sessions.
Italy Puts Cyber Lessons on the Student Front Line
ACN and Skuola.net have launched a cyber-education campaign aimed at young people, turning awareness into a practical layer of digital defense.
The Kit Was Burned, Not the Playbook: Kratos and the Afterlife of Phishing Infrastructure
A July 2026 disruption did not end the threat around Kratos - it appears to have pushed its methods into fresh Microsoft 365 phishing campaigns.
Fake Attacks, Real Pressure: Why Simulated Cyber Drills Matter for SMEs
A realistic attack exercise can reveal a company’s weakest point long before criminals do: how people decide when the clock is ticking.
One Phishing Kit Fell, but Microsoft 365 Attackers Kept the Blueprint
The disruption of Kratos may have removed one criminal service, but the deeper problem is the reusable playbook behind modern Microsoft 365 account-takeover campaigns.
When Confidential Messages Leave the Office, the Phone Becomes the Perimeter
Italian SMEs and public offices are facing a quieter but harder problem: protecting sensitive communications as smartphones, cloud services, and collaboration apps pull them beyond traditional boundaries.
Fake Teams Update, Real Remote Access: The BlueDash Playbook
A counterfeit Microsoft Teams update flow is being used to push legitimate remote management tools onto victim systems, blurring the line between phishing and admin software abuse.
More Than 70 Look-Alike Windows Download Sites Turn Software Search Into a Trap
A cluster of impersonation domains shows how attackers can abuse search traffic, brand trust, and download reputation before any file ever reaches the desktop.
When a Meeting Invite Becomes a Malware Stage: BlueNoroff’s Browser Trap
A fake video-call lure, webcam permission prompts, and Defender tampering show how modern phishing can behave like a targeted intrusion chain rather than a simple credential scam.
The QR Trap: How Quishing Turns Email Into a Mobile Ambush
QR-code phishing is growing fast because it moves the scam out of text filters and into the scan step, where a personal phone may become the attacker’s real launchpad.
When a Login Prompt Becomes a Crime Scene
A guilty plea tied to a Snapchat phishing case shows how account takeover can turn routine social engineering into intimate privacy loss.
Health Advice by Tap, Swipe, and Chat: Why the Fastest Answer Can Be the Riskiest
When health questions move from clinics to search bars, apps, wearables, and chatbots, speed can outpace verification and turn private concerns into data and decision-making risks.