F5 Labs

A behind-the-scenes peek into the hidden world of human click farms.

Denial-of-service attacks are increasing and becoming more complex. We look at how attackers are attempting to bring down services around the world.

Denial-of-service attacks are increasing and becoming more complex. We look at how attackers are attempting to bring down services around the world.

Latin America’s cyberattack landscape saw continued focus on port 5900 and the targeting of common web vulnerabilities.

Latin America’s cyberattack landscape saw continued focus on port 5900 and the targeting of common web vulnerabilities.

How cybercriminals use credential stuffing attack tools OpenBullet and MailRanger to bypass CAPTCHA, compromise mailboxes, and reset passwords.

How cybercriminals use credential stuffing attack tools OpenBullet and MailRanger to bypass CAPTCHA, compromise mailboxes, and reset passwords.

How platform business models are at an increased risk of fraud when two or more separate parties collude.

How platform business models are at an increased risk of fraud when two or more separate parties collude.

We dig into the credential stuffing attack tool OpenBullet and look at configuring combolists, proxies, parse tokens, and check blocks for launching attacks.

We dig into the credential stuffing attack tool OpenBullet and look at configuring combolists, proxies, parse tokens, and check blocks for launching attacks.

Even with 99.95% efficacy of network security controls, bad actors can still monetize fraud. Security convergence is the way forward in surviving digital fraud.

Even with 99.95% efficacy of network security controls, bad actors can still monetize fraud. Security convergence is the way forward in surviving digital fraud.

Three years of reported security incidents shows continued growth in denial-of-service and password login attacks such as brute force and credential stuffing.

Three years of reported security incidents shows continued growth in denial-of-service and password login attacks such as brute force and credential stuffing.

Passwords are inherently flawed, and not just because of credential stuffing. The future of authentication looks very different, but there are steps you can take now to control risk.

Passwords are inherently flawed, and not just because of credential stuffing. The future of authentication looks very different, but there are steps you can take now to control risk.

TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.

TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.

The tale of The Three Little Pigs can teach us more than you think about cybersecurity risk.