Trellix Advanced Research Center

Mission-critical security for intelligence-led cyber resilience

[Trellix Advanced Research Center @TrellixARC]

How do attackers hijack Active Directory without a trace?

Our new blog covers the full Kerberoasting kill chain—from SPN scanning to silent RC4-HMAC TGS ticket requests.

🔗 https://t.co/qX7D46ZVOl

[Trellix Advanced Research Center @TrellixARC]

Every SecOps team should have eyes on this week’s findings from the team! 👀
https://t.co/mJyyObqj0A

[Trellix Advanced Research Center @TrellixARC]

Defending your organization starts with staying informed. Explore our latest threat breakdown to keep your systems protected: https://t.co/mJyyObqj0A

[Trellix Advanced Research Center @TrellixARC]

We ID’d 300+ malicious skills in the ClawHub registry using ClickFix engineering & indirect prompt injections to deploy NovaStealer. Because plaintext prompts bypass traditional heuristics, behavioral monitoring of child processes is vital.

Learn more: https://t.co/X6PmwpYK1d

[Trellix Advanced Research Center @TrellixARC]

Adversaries change tools, but techniques don't. 🚨 See how @Trellix Helix correlates cross-vector telemetry to detect NTDS.dit theft and stop domain takeover: https://t.co/zlsOQ2Pw3j

[Trellix Advanced Research Center @TrellixARC]

🚨 We uncovered a new DCRat 🐀 campaign using fake judicial emails. Attackers hide code in SVG files disguised as Google Brotli compression to bypass checks.

See how to stop these multi-stage threats. https://t.co/pKP17DYye6

[Trellix Advanced Research Center @TrellixARC]

🚨 Here’s the latest cybersecurity threats you need on your radar this week: https://t.co/mJyyObqj0A

[Trellix Advanced Research Center @TrellixARC]

Now available on dark web forums: commodity AI-enhanced cybercrime tools and services - autonomous kill-chain planning engines, stolen API credential markets, AI-assisted insider threat tooling, and more.

Read the blog for a full technical analysis: https://t.co/OSCAFdOf2l