Tag

#account-takeover

28 posts1 followers

Explore Hashnode

Alternatives

RePointing: 17,610 Fake GitHub Repos That Were Never Deleted, Only Re-Aimed

Summary 17,610 fake GitHub repositories are serving SmartLoader, and Apiiro verified a malicious ZIP behind every single one. That is nearly double the largest list published before. What matters is n

blog.fiscybersec.com

Dimakatso SebataneOct 10 · 12 min read

Case Study: Pre-Account Takeover via OAuth Misconfiguration

Relevant CWE: CWE-287 — Improper Authentication - Generic Introduction Imagine signing up for a new platform using your Google account. You successfully authenticate, access your dashboard, and start

ovawatch-security.hashnode.dev

yeweiJun 2 · 10 min read

Email Alias Phishing Protection: How Unique Aliases Stop Account Takeover

Phishing attacks are no longer just poorly spelled emails from a fake prince. They are sophisticated, targeted, and automated. In 2025, the FBI's Internet Crime Complaint Center reported over $4.1 bil

quantaflow.hashnode.dev

404 FoundersJun 1 · 3 min read

Sweet. Just Ask Meta AI Nicely an Get Someone Else's Instagram

The Bot Had The Keys Several Instagram users reported account takeovers over the weekend. The unusual part was the alleged attack path. According to reports, attackers abused Meta's AI support assista

404-founders.com

Niranjan GMay 25 · 6 min read

The Hidden Threat After Login: Understanding Session Hijacking

You did everything right. You turned on multi-factor authentication (MFA). You use strong passwords. Maybe you even switched to passkeys. So how did an attacker still get into your email? The answer i

blog.securityinsights.io

shemkarApr 26 · 6 min read

One Extra JSON Key: How a Harmless Profile Endpoint Became an ATO Candidate

The harmless profile endpoint that taught me how real bugs work Early in my bug bounty journey, I found a bug that looked simple from the outside, but it changed the way I think about web security. At

shemkar.hashnode.dev

Satyam RastogiApr 18 · 6 min read

DraftKings Credential Trafficking: Post-Plea Monetization & Detection Gaps

Originally published on satyamrastogi.com Kamerin Stokes monetized DraftKings credentials through underground marketplaces post-plea, revealing systemic gaps in credential revocation and underground market monitoring. DraftKings Credential Traffick...

satyamrastogi.hashnode.dev

RisingWave LabsApr 7 · 13 min read

Real-Time Features for Account Takeover Detection

Account takeover (ATO) is the fraud vector that breaks most traditional detection systems -- not because it is technically sophisticated, but because it uses entirely valid credentials. The attacker is not forging a card number or synthesizing a fake...

risingwave.com

Cyber Safety ZoneFeb 24 · 2 min read

OAuth Attacks Explained: Why U.S. Businesses Are Losing Accounts Without Password Leaks

In today’s digital-first world, most U.S. businesses rely on OAuth to make logging in easier for users. From Google and Microsoft to Slack and Dropbox, OAuth allows users to access apps without repeat

blog.cybersafetyzone.com

Lakshay DhoundiyalFeb 8 · 6 min read

Ghostpairing Attack: The WhatsApp Hack That Lets Strangers Read Your Chats 👻

Most people think WhatsApp hacks look dramatic. A locked account.A warning message.A sudden logout. But what if the most dangerous WhatsApp attack does none of that? The Ghostpairing attack is a stealthy form of WhatsApp account takeover that doesn’t...

lakshaydhoundiyal.hashnode.dev

Search Hashnode