Eric Gonzales Eric Gonzales

Red Teaming the Adversary: Detecting Weaponized Infrastructure Before the First Phish

Can your current reconnaissance distinguish between a harmless parked domain and weaponized infrastructure that already possesses active mail servers and cloned login portals ready to strike? This analysis explores the detection of pre-staged adversary infrastructure, demonstrating how to identify malicious intent and capability to neutralize Business Email Compromise (BEC) campaigns before the first email is ever sent.

Read More
Threat NG Staff Threat NG Staff

The Shadow Periphery: Finding the Cloud Buckets Your Client Forgot

Are you limiting your reconnaissance to the client's provided IP range while critical data leaks from "Shadow" storage buckets in the public cloud? This analysis explores the mechanics of "Shadow Cloud Buckets," demonstrating how to automate the discovery of off-scope assets to secure stealthy initial access and pivot into the internal network.

Read More