Aryan Aryan
@felon13370 followers81 downloads12 copies2 likes158 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
2
1
1
1
Platforms
1
1
1
1
Products / Services
1
MITRE Techniques
1
1
1
1
1
Detects indicators of compromise (IOCs) and suspicious OAuth consent activity
linked to the Tycoon/ODx phishing kits. These campaigns impersonate Microsoft
OAuth apps to bypass MFA and harvest Microsoft 365 credentials.
linked to the Tycoon/ODx phishing kits. These campaigns impersonate Microsoft
OAuth apps to bypass MFA and harvest Microsoft 365 credentials.
Detects ERMAC V3.0 C2/panel/builder traffic using backend API routes, auth artifacts, exfil paths, injects directory indicators, and unique strings from the source leak. Emphasizes multi-indicator matches in the same event for high confidence.