https://www.lab539.com/blog daily 0.75 2025-07-10 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.lab539.com/blog/2024s-aitm-activity-in-numbers monthly 0.5 2025-02-12 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/df59f075-61bb-4894-bf4d-157c90379fc3/chart_aitm-distribtion-per-month-2024.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/42734417-222a-45ed-ae7d-31fb71962be0/chart_aitm-activity-by-day-of-week.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/2516f07d-7d47-47ab-a472-b520f94b1449/chart_aitm-infrastructure-activity-by-hour-marked.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/ef94c3f8-958c-43f3-9d37-169df4ceddfc/timezone_july-2024.png Blog - 2024’s AiTM Activity In Numbers - Make it stand out Credit timeanddate: https://www.timeanddate.com/worldclock/sunearth.html?day=15&month=7&year=2024&hour=17&min=0&sec=0&n=&ntxt=&earth=0 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/630b0582-cdd2-4a13-b1a8-e7515cafe36a/chart_domain-purchase-to-use-in-aitm.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/c65c5eab-7ef0-419a-a7ad-0f64c8acb3ab/chart_preferred-hosting-provider.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/a8359486-2888-406a-8133-560bac065950/chart_preferred-hosting-country.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/deaffb79-b6e3-4a5b-8c67-8f22d2012140/chart_preferred-domain-registrar.jpg Blog - 2024’s AiTM Activity In Numbers - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/e8b07e93-1af8-4d5f-b93c-ed7ee3c15f87/aitm-feed.png Blog - 2024’s AiTM Activity In Numbers - If you are not subscribed to our AiTM feed but would like to be then why not check it out and subscribe? Individual subscribers can register online and if you’d like to incorporate our feed into a service that you provide your customers then reach out and we can hook you up. https://www.lab539.com/blog/self-hosted-conditional-access-service monthly 0.5 2025-07-10 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/7b442eeb-c8da-47a5-b953-e581e046712e/app-registration-permissions.png Blog - Self Hosted Conditional Access Service - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/1939b159-7879-401c-b59b-4845ed1ef112/new-named-location.png Blog - Self Hosted Conditional Access Service - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/3d08fa69-9519-4cfa-a717-3352b0cf59a4/consent-to-graph-permissions.png Blog - Self Hosted Conditional Access Service - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/37cd3b1d-04da-4ee3-bdb3-43699a670d48/ms-graph-response.png Blog - Self Hosted Conditional Access Service - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/6577676b-afb5-40a4-a01a-d1e607a6f19b/new-arm-template.png Blog - Self Hosted Conditional Access Service - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/file-hosting-services-used-for-identity-phishing monthly 0.5 2024-10-16 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/e1271b8a-20cf-4b7e-8425-221ed9e4d3d6/contender-icons_cropped.png Blog - File Hosting Services Used for Identity Phishing - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/fc1dd5a8-71c0-4cbf-babd-3176263292a0/contender-hits.png Blog - File Hosting Services Used for Identity Phishing - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/3e9b8bb7-4bf8-42d5-8a80-a36d3078f6ad/cloudzy-logo.png Blog - File Hosting Services Used for Identity Phishing - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/09726c20-ae2f-4bb0-9a52-cd4f1852334a/com.png Blog - File Hosting Services Used for Identity Phishing - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/aitm-feed-conditional-access monthly 0.5 2024-10-24 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/3c3df913-9854-4078-aaf9-dcb49f1e8fc7/permissions.png Blog - AiTM Feed - Conditional Access - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/bfe40a31-19d6-40fc-a153-81a3b8f062f8/ca-user.png Blog - AiTM Feed - Conditional Access - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/conditional-access-policy-to-block-tor-ips monthly 0.5 2025-05-22 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/19428d40-a735-4ab3-b84c-03ac0abc7c69/entra-conditional-access-icon.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/6a3c8ecd-54fc-4080-afd0-28a7032f9894/ip-ranges-location.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/a7d1a06b-7688-4f5d-a8fa-f001d50a5625/new-named-location.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/91600a12-22f3-40e8-b2f0-fe8ca9f4c71c/populated-named-location.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/f4741d65-1e69-4109-b4f6-8c2228ef9326/new-policy.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/c38cdeca-3e80-4a8c-8704-2d912d76bae7/creating-policy1.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/14ddc024-2445-467f-9d2d-c0b085bfb7c9/creating-policy2.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/61b031c5-d2ad-462e-836d-3a9757286011/creating-policy3.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/5808f104-3617-4112-bea0-b9501d395412/creating-policy4.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/c301d197-8b8b-424b-a582-57d09f1df5f4/failed-conditional-access-policy-m.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/6af23a80-5e8c-4aa7-be3f-2979990a469a/example-policy-blocking.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/932b923a-b827-4a2b-9e01-7bdf659d0edf/example-policy-allowing.png Blog - Using Conditional Access Policies to Block Tor Exit Nodes in Entra ID - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/6-months-tracking-aitm-campaigns monthly 0.5 2024-05-01 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/c2bb5e9b-a84f-4609-a42a-68d35a66d9fe/ips-to-domain.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out IP to Domain Mappings https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/235c9631-6db6-4616-abc3-2c8db6d27d0a/ips-to-hostnames.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out IP to Hostname Mapping https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/8817e6f7-60e0-4524-89e7-cd41093fb1d5/banking1.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Domain to IP mapping of banking campaign https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/fb691ada-193c-4bc7-a1d7-7b9b4b22a0e5/banking-subdomains.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Subdomain to IP mapping of banking campaign https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/5673e347-857f-428f-9646-f13cc878b20b/fast-food.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Linked infrastructure of fast food campaign https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/47bb4bbe-0d26-4b58-9954-b7cc214d42d9/microsoft-login.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Sample Microsoft phishing site used by one of the tracked campaigns https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d727e392-95cc-4a07-8704-9265c7db40c2/pie_hosting-country.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Top 5 AiTM hosting countries https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/0a7b9f37-fa26-4d6d-97db-b2c4b6c65587/pie_hosting-provider.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Top 5 AiTM hosting providers https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/65b300c3-767a-4b7f-a80c-da29c792234b/pie_registrar.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Top 5 AiTM registrars https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/79d5d2d8-0aae-4312-8311-170f065ee59f/t-shirt.png Blog - A Summary of 6 Months Tracking AiTM Campaigns - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/the-cyber-defenders-kill-chain-tcdo-part2 monthly 0.5 2024-04-23 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/0abf00e0-f25e-4508-b159-cdd516427ac8/lab539-cyber-defenders-kill-chain_medium.png Blog - The Cyber Defenders Kill Chain (TCDO Part2) - Make it stand out Lab539 Cyber Defenders Kill Chain https://www.lab539.com/blog/applying-context-to-control-adversaries-part1 monthly 0.5 2024-04-23 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/1713905666578-HDVTSSHBPG71TVLJHBD6/context-centric_medium.png Blog - Applying Context, Controlling Adversaries (TCDO Part 1) - Make it stand out Tailored Cyber Defence https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/ae61c694-1ebb-4ac1-862a-fc48de3ddd27/context-centric-dark-bg.png Blog - Applying Context, Controlling Adversaries (TCDO Part 1) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/cyber-security-fuel-terminals-operational-networks monthly 0.5 2024-07-30 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/bf105cdd-46ed-475f-8f93-08c470b190fe/tank-storage.jpg Blog - Cyber Security, Fuel Terminals and Operational Networks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/e40de112-6660-43d8-ba76-57224e2e3b84/conti-top.png Blog - Cyber Security, Fuel Terminals and Operational Networks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/af729d68-c015-4283-b51f-60136cfb5a8a/conti-bottom.png Blog - Cyber Security, Fuel Terminals and Operational Networks - Make it stand out A screenshot showing the data posted on the Conti ransomware group’s leak site lifted from SEA-Invest https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/f396993b-4007-4b99-893c-0cea2ec46124/bazan.jpg Blog - Cyber Security, Fuel Terminals and Operational Networks - Make it stand out Screenshots of the access CyberAv3ngers gained to Bazan Group’s systems (further sanitised by Lab539) https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/c947f31d-9684-4df9-8aea-376ffca94a26/tank-storage-pano.jpg Blog - Cyber Security, Fuel Terminals and Operational Networks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/inside-akira-ransomware-negotiations monthly 0.5 2023-08-06 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/fe23edd2-fc4e-4be0-a711-cacc4c22e406/akira-victim-landing-page.png Blog - Inside Akira Ransomware Negotiations - Make it stand out The landing page presented to victims https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/efe9cc50-dbe3-48d8-8975-96720cab15d9/akira-chat1.png Blog - Inside Akira Ransomware Negotiations - Make it stand out Akira chat https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/c064fc3b-41e9-410a-ac33-22e6264f46cb/akira-chat2.png Blog - Inside Akira Ransomware Negotiations - Make it stand out Akira chat providing list of files taken https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/2dffb9a5-bbab-4f1c-9aac-4553f83b61ff/akira-chat3.png Blog - Inside Akira Ransomware Negotiations - Make it stand out Akira chat options https://www.lab539.com/blog/leaked-payment-card-reporting monthly 0.5 2023-08-05 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/395c8f47-1c16-493c-b196-8535723569b2/paymentCards_20pc_cubed.png Blog - Report leaked payment cards - Report leaked credit cards Help ensure victims of cyber crime don’t lose out Help disrupt the funding cycle of cyber crime https://www.lab539.com/blog/linux-malware-detection-with-limacharlie monthly 0.5 2023-08-03 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/8dea9695-b63a-4af7-896e-3b7dca6b2b07/limacharlie_lookups1.png Blog - Linux Malware Detection with LimaCharlie - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/1688245138967-2E91RAQX4FHCORR1B0HY/limacharlie_lookups2.png Blog - Linux Malware Detection with LimaCharlie - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.lab539.com/blog/category/TCDO+Pattern monthly 0.5 https://www.lab539.com/blog/category/Blog+Post monthly 0.5 https://www.lab539.com/blog/category/Tooling monthly 0.5 https://www.lab539.com/blog/tag/Industrial monthly 0.5 https://www.lab539.com/blog/tag/defence monthly 0.5 https://www.lab539.com/blog/tag/MFA monthly 0.5 https://www.lab539.com/blog/tag/Credit+Card monthly 0.5 https://www.lab539.com/blog/tag/MiTM monthly 0.5 https://www.lab539.com/blog/tag/OilAndGas monthly 0.5 https://www.lab539.com/blog/tag/Malware monthly 0.5 https://www.lab539.com/blog/tag/cyber+defenders+kill+chain monthly 0.5 https://www.lab539.com/blog/tag/TCDO monthly 0.5 https://www.lab539.com/blog/tag/kill+chain monthly 0.5 https://www.lab539.com/blog/tag/AiTM monthly 0.5 https://www.lab539.com/blog/tag/Hack monthly 0.5 https://www.lab539.com/blog/tag/Breach monthly 0.5 https://www.lab539.com/blog/tag/Phishing monthly 0.5 https://www.lab539.com/blog/tag/Payment+Cards monthly 0.5 https://www.lab539.com/blog/tag/OT monthly 0.5 https://www.lab539.com/blog/tag/Banking monthly 0.5 https://www.lab539.com/blog/tag/akira monthly 0.5 https://www.lab539.com/blog/tag/Linux monthly 0.5 https://www.lab539.com/blog/tag/Our+Thinking monthly 0.5 https://www.lab539.com/blog/tag/Tailored+Cyber+Defence monthly 0.5 https://www.lab539.com/blog/tag/leaked.cards monthly 0.5 https://www.lab539.com/blog/tag/ICS monthly 0.5 https://www.lab539.com/blog/tag/LimaCharlie monthly 0.5 https://www.lab539.com/blog/tag/ransomware monthly 0.5 https://www.lab539.com/lab539-home daily 1.0 2026-04-02 https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/29d6c06f-f634-4712-a561-9e2e88b156d0/logo-white-transparent.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/b6a9f5d9-c743-4335-be36-6c21fd8015ed/CyberUK_Logo_Col_RGB.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/f3f582aa-8035-4a1c-9f3e-4fe3c8032766/cropped-bs-scaled-1.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/0f7796c1-e43f-4438-8589-01454514e643/logo-5got-w.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d6c4c9fc-7144-42de-a6f3-8a9a79aa8356/20230618082028_IMG_2865.JPG https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/883e964a-5141-4d2d-a7ee-014f28fe13a3/lockbit.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/53cf78e0-f378-43ca-9e12-b60dc41f1da0/PXL_20230618_093324126.MP.jpg https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/1710845764548-C49VGL9YAA809KBRNCAN/image-asset.jpeg https://www.lab539.com/terms-of-service daily 0.75 2024-07-03 https://www.lab539.com/privacy-statement daily 0.75 2024-09-16 https://www.lab539.com/aitm-api-documentation daily 0.75 2024-08-21