Category Archives: MailSniper

Google Event Injection – Tradecraft Security Weekly #20

Posted on by

Google provides the ability to automatically add events to a calendar directly from emails received by Gmail. This provides a unique situation for phishing attempts as most users haven’t been trained to watch their calendar events for social engineering attempts. In this episode Beau Bullock (@dafthack) and Michael Felch (@ustayready) show how to inject events […]

The post Google Event Injection – Tradecraft Security Weekly #20 appeared first on Security Weekly.

Continue reading Google Event Injection – Tradecraft Security Weekly #20→

Attacking Exchange/OWA to Gain Access to AD Accounts – Tradecraft Security Weekly #3

Posted on by

Microsoft Exchange and Office365 are extremely popular products that organizations use for enterprise email. These services can be exploited by remote attackers to potentially gain access to Active Directory user credentials. In this Tradecraft Securit… Continue reading Attacking Exchange/OWA to Gain Access to AD Accounts – Tradecraft Security Weekly #3→