#detection

3 articles

UNC6783: How to Detect the Fake Okta Login Pages Used in Vishing Attacks

The UNC6783 group impersonates IT support staff by phone, then redirects victims to fake Okta login pages to bypass MFA in real time. A practical guide for detection and defense.

April 11, 2026

Tutorials 2 min read

Detecting in-memory webshells: a SOC team guide

In-memory webshells evade traditional file scans. Technical detection guide using memory analysis, process monitoring, and behavioral analysis.

March 30, 2026

Tutorials 2 min read

WebRTC skimmer: understanding and detecting next-gen payment theft

Payment skimmers now use WebRTC data channels to exfiltrate card data, bypassing WAFs and traditional security controls. Detection guide.

March 26, 2026