#vultr — Public Fediverse posts

Tracking BigBear 2.0 Evilginx2 Phishing Campaign

In June 2026, researchers uncovered BigBear 2.0, a rebranded Evilginx2-based phishing-as-a-service framework targeting Microsoft 365 credentials globally. The operation, managed by operator 'General Boss', deployed 42 VPS nodes primarily hosted on Vultr infrastructure, utilizing the 'offy' phishlet configuration. The platform employed adversary-in-the-middle techniques with geo-matched residential proxy pools across 69 countries, real-time Telegram exfiltration, and automated cookie replay to bypass MFA. The campaign exfiltrated 5,137 credential records including 474 complete MFA-bypassed authentications, 1,032 plaintext passwords, and 4,148 session cookies, affecting 3,331 unique victim IPs across 40+ countries. The multi-user PhaaS panel was leased to at least five identified affiliate operators. Custom JavaScript injections disabled FIDO2/WebAuthn MFA while residential proxies bypassed anti-bot detection, enabling persistent access to compromised Microsoft 365 environments.

Pulse ID: 6a9ef10da8f75f1218af678c
Pulse Link: https://otx.alienvault.com/pulse/6a9ef10da8f75f1218af678c
Pulse Author: AlienVault
Created: 2026-09-07 17:14:53

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AdversaryInTheMiddle #Cookies #CyberSecurity #InfoSec #Java #JavaScript #MFA #Microsoft #OTX #OpenThreatExchange #Password #Passwords #Phishing #Proxy #RAT #Telegram #Vultr #Word #bot #AlienVault

2024W07

OmniOS Stable is updated to r151048o
This update requires a reboot
https://github.com/omniosorg/omnios-build/blob/44731424e67c8aaafe5c4e500fe7c4544a22f0f6/doc/ReleaseNotes.md#r151048o-2024-02-15

OmniOS Extras updates include:
— OpenLDAP updated to 2.6.7
— VirtualBox updated to 7.0.14a
— BIND updated to 9.16.48 / 9.18.24
— Unbound updated to 1.19.1
— OpenVPN updated to 2.6.9
— Nginx updated to 1.25.4
— Listmonk updated to 3.0.0
And much more!

SmartOS 20240208T000334Z
Interesting changes include:
— bhyve returns bogus cpuid 8000_001D leaf
— update pkgsrc-setup to 20240116
— Update curl to 8.6.0
— Update OpenSSL to 3.0.13
https://us-east.manta.joyent.com/Joyent_Dev/public/SmartOS/smartos.html#20240208T000334Z

2024-02-15 bhyve Production User Call
https://www.youtube.com/watch?v=X1joWFfpTX8

Mirroring OmniOS: The Complete Guide; Part One
https://antranigv.am/posts/2024/02/omnios-mirror-one/

Booting OmniOS on Vultr
https://github.com/omniosorg/illumos-omnios/issues/1432

Migrate a FreeBSD bhyve virtual machine to OmniOS
https://www.tumfatig.net/2024/migrate-a-freebsd-bhyve-virtual-machine-to-omnios/

ZFS encryption and notification service on OmniOS
https://www.tumfatig.net/2024/zfs-encryption-and-notification-service-on-omnios/

Configure OmniOS to use an authenticated SMTP relay (smarthost)
https://www.tumfatig.net/2024/configure-omnios-to-use-an-authenticated-smtp-relay-smarthost/

Remotely install OmniOS on a Dell R620
https://www.tumfatig.net/2024/remotely-install-omnios-on-a-dell-r620/

Dealing with USB Storage devices on OmniOS
https://www.tumfatig.net/2024/dealing-with-usb-storage-devices-on-omnios/

Running OpenBSD on OmniOS using bhyve
https://www.tumfatig.net/2024/running-openbsd-on-omnios-using-bhyve/

SMB shares using OmniOS, zones and ZFS
https://www.tumfatig.net/2023/smb-shares-using-omnios-zones-and-zfs/

Add support for Emulex LPe35000/LPe36000 32Gb/64Gb fibre channel chipsets
https://www.illumos.org/issues/15391
https://github.com/illumos/illumos-gate/commit/e2d1a4340d8c7e04c758949b4fb4b1934fcf9330

Provide execvpe
https://www.illumos.org/issues/7125
https://github.com/illumos/illumos-gate/commit/a89c0811c892ec231725fe10817ef95dda813c06

Port NFSv41 base
(Allows to enable and disable NFSv4 minor versions)
https://www.illumos.org/issues/15405
https://github.com/illumos/illumos-gate/commit/f44e1126d9eae71c48c5d1de51e24750c6ec20a4

pcieadm decodes readiness time reporting
https://www.illumos.org/issues/16233
https://github.com/illumos/illumos-gate/commit/8a300ed6ab165c8d46fd165c6d8a4de8a5b0b596

Update tzdata to 2024a
https://www.illumos.org/issues/16230
https://github.com/illumos/illumos-gate/commit/e15592c8dabdb93c1b45a4785db35f013e0b49f9

illumos now recognizes QEMU/TCG as a hypervisor
https://www.illumos.org/issues/16139
https://github.com/illumos/illumos-gate/commit/2faf06a0ad863963d95ad569428e5e6e45255ab7

https://news.illumos.am/2024w07/

#bhyve #cpuid #DellR620 #Emulex #FibreChannel #FreeBSD #illumos #NFS #OfficeHours #OmniOS #OpenBSD #PCIe #pcieadm #QEMU #SmartOS #SMB #Storage #syscall #tzdata #USB #Vultr #ZFS