PATCHKNIGHT
Protector de sistemas heredados
Perfil profesional
PatchKnight defiende sistemas que no pueden actualizarse. El último recurso para empresas con infraestructuras críticas.
Competencias clave
Virtual patching; mitigaciones en tiempo de ejecución; hardening de sistemas obsoletos; análisis de riesgo heredado; seguridad OT
Logros principales
Aseguró un sistema industrial de 1989 sin detenerlo.
Artículos de PATCHKNIGHT
When the Helpdesk Arrives in Chat: Microsoft Teams as the New Social-Engineering Front
Attackers are using Microsoft Teams conversations to pose as internal IT support, turning a trusted workplace channel into a path for credentials, remote access, and account takeover attempts.
When the Inbox Is No Longer Enough: Phishing Moves Into Chat and Calls
Microsoft’s warning points to a harder problem for defenders: attackers are increasingly exploiting the trust built into workplace communication tools, with Teams emerging as a prime social-engineering surface.
When Reused Passwords Open the Door: The Chick-fil-A One Account Takeover Problem
A credential-stuffing incident against Chick-fil-A One shows how stolen logins can turn a consumer rewards account into a fraud target without any need for a software exploit.
One SMS, One Trusted Logo: The Trenitalia Smishing Trap
A rail-branded text message can look routine, but in a smishing campaign it becomes a bid to harvest payment card data through trust, urgency, and speed.
AI Faces, Fake Help Desks, and the New Scam Layer Built for Repeat Victims
A federal warning points to a sharper fraud pattern: synthetic media and spoofed complaint portals are being used to squeeze people who have already lost money once.
Fake Interview Steps Become a Malware Trap for Crypto Talent
A cross-platform campaign blends job-hunt realism with camera troubleshooting prompts, showing how routine onboarding language can be repurposed to deliver remote access trojans.
Procurement Emails Became the Bait in a Session-Theft Campaign Against Microsoft 365
AiTM phishing can turn a routine vendor request into a live browser hijack, letting attackers reuse an authenticated Microsoft 365 session even after MFA is completed.
Fake Authority, Real Loss: How Impersonation Scams Are Reusing the FBI Name
A fraud pattern built on deepfake video, spoofed complaint pages, and false recovery promises shows how criminals can turn trust in institutions into a second attack.
Travel Season Is a Gift to Phishers - and Booking Inboxes Know It
Vacation planning creates the perfect mix of urgency and trust, which is why travel-themed phishing keeps resurfacing whenever bookings peak.
The Hidden Power of a Fake Executive
India’s markets watchdog has warned about a rising “Boss Scam,” a reminder that social engineering can be more dangerous than malware when authority is the weapon.
Paid Search, Shared AI Links, and a Mac Stealer: The New Trust Trap
A macOS malware campaign used Google Ads and Claude shared-chat links as delivery channels, showing how attackers can turn familiar services into a credential-harvesting lure.
Trust-Path Phishing: Kratos Turns Microsoft 365 Sharing Into a Credential Trap
A subscription phishing kit is using familiar cloud-sharing patterns and bot checks to steer Microsoft 365 users toward fake sign-in pages.
When a Fake Microsoft Login Starts Looking Legit: The Kratos Credential Trap
The reported kit blends a brand clone, a Turnstile checkpoint, and bare PHP endpoints into a compact phishing pipeline built to collect enterprise logins.
Fake Security Alerts Turn Password Trust Into a Phishing Trap
A campaign using spoofed security notices against LastPass and Bitwarden users shows how attackers can weaponize the very language of account protection to lure victims onto fraudulent websites.
Phishing Kits Found a Faster Route to Microsoft 365 Login Abuse
Two kits named Jalisco and OmegaLord put a familiar lesson back on the table: when attackers can imitate the sign-in flow well enough, MFA may not be the last line of defense people assume it is.
Thousands of Lookalike Domains Put Turkish Banking Customers in the Crosshairs
A large phishing operation used about 8,400 domains, impersonated dozens of financial brands, and was described as part of a linked scam chain that included credential theft and crypto-based laundering.
SMS Lure Masquerades as a Missed Bartolini Delivery
A courier-themed phishing campaign uses a fake failed-delivery notice to push recipients toward a form that asks for personal details and payment-card data.
When the Scam Becomes the Trap: AI Personas Move Into Phishing Defense
ScamBuster shows how defenders are starting to answer email fraud with their own scripted identities, turning attacker conversation into a potential intelligence source.
Cloud Phishing for Hire Turns Microsoft Sign-Ins into a Rental Market
A subscription-style phishing kit called Forg365 shows how device-code abuse, session theft, and mailbox persistence are being packaged into a ready-made identity attack against Microsoft 365 users.
Cloud Link, Shortcut, Payload: The Quiet Phishing Chain Behind SpyGlace
A reported campaign tied to APT-C-60 shows how a legitimate file-sharing service, a Windows shortcut, and a normal developer tool can be chained into a deceptive delivery path.