Typosquatting … g or recognizing a name. The attacker registers a domain, an account or a software package that resembles a legitimate name, counting on a user, a developer or …

Business Email Compromise … . Then the message does not come from a lookalike domain but from the real account, inside a real conversation, at the right moment. The attacker reads the corr …

Credential stuffing … of credentials from the same company and the same domain on a dark web market, the odds that the leaked credentials still work rise sharply.

DNS Poisoning … user or a resolver is given a false answer for a domain. The result is that the user types a familiar address into the browser and DNS takes them to the wrong …

Kerberoasting Kerberoasting is an attack specific to Windows domain networks and Active Directory (AD). User logins are handled by the Kerberos protocol, which issues tickets …

Pass-the-Hash … t and the passing of collected hashes towards the domain controller.

Privilege Escalation … ns: vertical escalation, from an ordinary user to domain administrator, and horizontal, moving from one account to another user's resources at the same level of …

Service Abuse … end a large number of emails to one person or one domain.

voice phishing - Vishing … There is little time to check a sender address, a domain, a link or a message header. If the call is convincing enough, if the number looks familiar, and if a l …