Cyber risk is inevitable. The solution is not avoiding digitization; rather, it is investing in cyber preparedness. Deloitte’s “Cyber Smart: Enabling APAC Businesses” In the 41-pages report prepared for VMWare, a US software company providing cloud computing and virtualization software and services, Deloitte analyzes cyber exposure, preparedness, and economic opportunity…

Recently, several experts discussed specific tools used by threat actors to conduct their operations. Among them, there is a publicly available tool focused on browser exploitation called BeEF. According to the official website, the Browser Exploitation Framework is a penetration testing tool that focuses on the web browser. BeEF has…

To improve my skills and refine my knowledge, I have decided to complete some capture the flag (CTF) challenges and release guides on how to solve them. The first CTF is “hackNos: Os-Hax,” created by Rahul Gehlaut and released on VulnHub. According to its description, this CTF helps learning exploitation…

As I mentioned in my previous article, social engineering is the act of deceiving someone into acting or divulging information, taking advantage of a victim’s natural tendencies and emotional reactions. If I may quote a line from the TV show Mr. Robot, “people always make the best exploits.” As John…

I want to begin this article with a disclaimer: the method I am going to illustrate is one of several. It is not completely automatic, meaning the target will have a role to play. Consequently, social engineering is a critical component. As a NortonLifeLock employee explained, social engineering is the…

Money laundering is the process of disguising the proceeds of crime and integrating it into the legitimate financial system. Thanks to technology, criminals can use a new method to launder money: cryptocurrency. A cryptocurrency is a digital or virtual currency that uses cryptography for security. …