The Hackle Box September 2021: IDN Phishing, Razer Mouse, T-Mobile, Cobalt Strike, and OAuth 2.0

The boys are back with another session of the Hackle Box. This month features in-depth discussion on four vulnerabilities/exploits that have gained the attention of Oscar, Pinky, and Eric over the last month or so.IDN Phishing — Outlook emails showing legitimate contact cards from lookalike domainshttps://arstechnica.com/information-technology/2021/09/microsoft-outlook-shows-real-persons-contact-info-for-idn-phishing-emails/Razer Mouse Bug — The bug allows admin privileges in Windows 10https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/T-Mobile Breach — 48 million social security numbers accessed from a pool of 50 million affected customershttps://www.zdnet.com/article/t-mobile-hack-everything-you-need-to-know/Hacking the Hackers — New exploit available for download lets hackers crash Cobalt Strike team servershttps://arstechnica.com/gadgets/2021/08/critical-cobalt-strike-bug-leaves-botnet-servers-vulnerable-to-takedown/As always, the session ends with the Hacker Tip of the Month from Eric and the Phishing Report with Pinky.Give this session a watch or listen, and feel free to send any comments, questions, or topic suggestions to [email protected] please like and subscribe!