Help TDS: Fake Microsoft Support Pushes Remote Access
Infoblox traced Help TDS from a fake Windows lock to an UltraViewer…
YAM Store Takedown Hits the Wholesale Side of Phishing
Microsoft and partners disrupted YAM Store and phishing-kit suppliers. See how stolen…
Xandr Fined Over Grindr Data in Ad Auctions
Norway fined Xandr NOK 92 million over historical Grindr data sharing. How…
WindowsPackageManagerServer.exe: Is It Safe, and How Do You Fix an Error?
Check WindowsPackageManagerServer.exe, interpret firewall and signature alerts, and follow the right App…
RedFlick Turns a Phishing Invitation Into Scheduled Windows Tasks
Microsoft traces Star Blizzard’s RedFlick chain: document-looking shortcuts, remote applets and scheduled…
MSP360 Phishing Turns One Fake Invitation Into Two Remote-Access Channels
Microsoft traced fake invitations and PDF lures to MSP360, then ScreenConnect. Why…
NeedyMantis Hides Its Next Stage Behind Familiar DLL Names
Microsoft traces NeedyMantis through planted DLLs, an extensionless archive and a fake…
KB5002907 Paused After Office 2016 and 2019 Lose Activation or Disappear
Microsoft paused KB5002907 after some Office 2016 and 2019 installations lost activation…
Storm-3168 Azure Attack: What Failed, What Survived
Microsoft’s Storm-3168 case shows why failed deletion requests, application permissions and separate…
Storm-2570 Uses Four Ransomware Brands—and the Same Access Tools
Microsoft links Storm-2570 to four ransomware families. Repeated remote access, credential theft…
Diagnostic Policy Service High CPU: Find What Keeps It Busy
Trace Diagnostic Policy Service CPU spikes to their trigger. Check the host…
Service Host Network Service High Network Usage: Find the Download
Identify the service behind heavy Windows network traffic, separate downloads from peer…