Exposed admin panel on a forgotten subdomain
A subdomain left running after a marketing campaign ended stayed up on an outdated CMS version, with its panel exposed to the internet.
3 modules
IG-UC · CASE ARCHIVE
The anatomy of real CTI cases: how a threat starts, how it is detected and how it is closed. Every file here is an example scenario.
A subdomain left running after a marketing campaign ended stayed up on an outdated CMS version, with its panel exposed to the internet.
An account copying the profile photo and title began direct-messaging employees and business partners.
Leak site telemetry showed a clear sector and geography shift in the crew's victim distribution.
Next step
In a 30-minute session we run a live scan against your own domains.