AUMINT.io Blog

 

Welcome to our blog. Subscribe and get the latest industry news, stay up to date with discovered new attack types and resources

How strong OSINT can be.

From Handle to Human: Unmasked “Rey” of Scattered LAPSUS$ Hunters Scattered LAPSUS$ Hunters (SLSH) emerged as one of the most disruptive cyber-extortion crews of recent years, blending social engineering, data theft, and public shaming campaigns against major global...

Beyond the Search Bar: Methodological OSINT in 2026

In the early days of Open-Source Intelligence (OSINT), the discipline was often defined by the "tool-first" mentality. Success was measured by the size of one’s bookmark folder or the obscurity of a specific Python script. However, as we move through 2026, the...

2026 Cyber Forecast: The Rise of “Super-Malware” and Deep Infrastructure Sieges

As we close out 2025, the threat landscape has shifted from opportunistic attacks to highly engineered, systemic campaigns. The final quarter of this year gave us two "canary in the coal mine" moments—the financial industrialization of GoldFactory and the deep...

Critical Alert: Sophisticated Impersonation Campaign Targets 150+ Organizations

As reported by the Microsoft Threat Intelligence Center (MSTIC), we are currently witnessing a new, high-volume wave of sophisticated spear-phishing attacks. This campaign marks a significant escalation in nation-state tradecraft for the 2026 threat landscape....

Prompt Engineering Your Family Christmas Dinner

A Survival GuideThe bird is roasting, the LEDs are twinkling, and you haven’t even hit the bottom of your first eggnog when the inevitable breach occurs. Uncle Bob flanks you, brandishing a fossilized iPad, and whispers the holiday curse: "Since you’re the computer...

Recent Bite-Size Posts

5 ransomware groups to be aware of

Ransomware attacks are increasingly focusing on bigger targets, with several major international companies falling victim in recent years. As a result, it’s crucial for all companies to take these sorts of threats seriously. Knowing who you’re dealing with is the...

Why you should only use your work laptop for work

If you’re someone who quickly checks their personal email or browses social media on their work laptop, then you’re not alone. According to a 2020 survey by antivirus vendor Malwarebytes, 53% of respondents reported sending or receiving personal email, 38% shopped...

Is multifactor authentication enough?

Whilst multifactor authentication (MFA) is better than single-factor authentication (i.e., only a username and password), cybercriminals are finding ways to bypass it making it less secure than many think.  And there have been some high profile cases where criminals...

4 key payments ecosystem threats to look out for

The payments ecosystem has always had to consider cybersecurity carefully, but since the rapid expansion of digital payments (thanks, in part to the pandemic), it’s become critical. Particularly as cybercriminals and hackers have also become more sophisticated in...

Could your suppliers be your biggest security risk?

Ensuring the security of your own network, and making sure you have systems and processes in place to minimise the risk of cyber attacks is crucial. But what about your suppliers? If they don't take the same precautions, they could make your business vulnerable. ...

How Slack can help hackers break into your systems

Whilst Slack can be a great collaboration tool, especially for remote teams, there are a number of vulnerabilities that IT security teams need to be aware of. And several recent high profile hacks highlight this. EA Games hack For example, in 2021 hackers were able to...

Common NFT scams to look out for

As non-fungible tokens (NFTs) become more popular, it opens up new opportunities for online criminals. If you’re new to NFTs, below are some of the most common scams to be aware of. But first… What are NFTs? An NFT is a unique digital identifier that is recorded on...

How crackable are your company passwords?

Everyone knows the importance of creating a really strong password to make it more difficult for hackers to break into your systems. This is particularly important for systems that might house confidential information, such as customer data or corporate secrets. But,...

How to spot a deepfake

As deepfakes become more sophisticated and better quality, they can pose a real threat to your business. For example, they can be used by scammers to impersonate someone your employees trust - such as the company’s CEO or CFO - as a way of getting money or...

Phishing for everyone – Webinar – 29/9/2022

We opened a dedicated webinars mailing list.The only emails you'll get there are Announcements on webinars and recordings.We won't spam you (or phish you) in any way, and we won't share your email address with anyone. * indicates required Email Address * Name Phone...

3 of the biggest ransomware attacks of 2022

Ransomware attacks are unfortunately an evolving risk for companies, large and small. In some ways, they are like biological viruses because they change, adapt and continue to do damage over time. That damage includes anything from causing chaos by blocking access to...

How hackers use LinkedIn for social engineering

LinkedIn is a great networking platform for professionals across all industries. However, it can give hackers insight into your work and your company, and arm them with information they can use to manipulate you into giving away company secrets.  Why would hackers...

See how the Hacker sees you

Get your FREE Exposure Report NOW
Get the report