Resources & Insights
Jovit Samaniego
2 articles
-
BlogHow AiTM Phishing Bypassed MFA to Hijack a Microsoft 365 Mailbox in BEC Scheme
One click on a targeted lure handed an attacker live Microsoft 365 session tokens, enough to impersonate a vendor and reroute payments. TrendAI Vision One™ Services – Managed Detection and Response (MDR) tracks the attack to its root cause.
August 14th, 2026 20 minJovit Samaniego
Read article -
BlogThrough the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites
Our analysis of an active KongTuke campaign deploying modeloRAT — malware capable of reconnaissance, command execution, and persistent access — through compromised WordPress sites and fake CAPTCHA lures shows that the group still operates this delivery chain in parallel with the newer CrashFix technique.
March 10th, 2026 9 minAira Marcelo, Jovit Samaniego, Ryan Maglaque, Fe Cureg…
Read article