Bleon Proko
LinkedInPosts
No Off-the-Shelf Kit Required: An overview of a custom AiTM phishing campaign found in the wild and the mechanisms behind it
Caught in the Middle: Responding to an AiTM Credential Heist
Introducing InfOSAStealer: ClickFix Delivery, Fake System Dialogs, and the Quiet Trojanization of Hardware Wallet Software
You don’t see me, therefore I am: Taking a look at abusing GitHub’s first party sessions for initial access
There’s a bot in my boot! Finding if hackerbot-claw tried tampered with your workflows
The Phishing Matryoshka: Unpacking a BEC to AiTM Nested Attack Chain
Feeding the worm a soft cloudy bun: The second coming of Shai-Hulud
The log rings don’t lie: historical enumeration in plain sight
Do you feel in control? Analysis of AWS CloudControl API as an attack tool
There’s a snake in my package! How attackers are going from code to coin
Ghost in the Script: Impersonating Google App Script projects for stealthy persistence