Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

Unit 42 threat intelligence covering large-scale Microsoft Entra credential attacks, Android IoT botnets, blockchain- and Tor-based command and control, npm supply-chain worms, API-token theft, AI-assisted vulnerability discovery and cyberattacks, macOS malware, webmail espionage, passkey implementation weaknesses, and zero-day exploitation of Siemens OT switches. The collection spans identity compromise, malware, supply-chain attacks, cloud and developer credential theft, industrial control systems, and adversary use of emerging technologies.