Posted on February 5th, 2019 Business email compromise (BEC) caused by phishing attacks are nothing new but they’re still quite effective and require only minimal effort by adversaries. One example is the Anthem Blue Cross breach of 2015. After locating “scam email campaigns targeting current and former Anthem members,” the company sent out a public statement to […]
Posted on January 29th, 2019 Surprisingly, the most common service that we find in our scans at Censys is CPE WAN Management Protocol (CWMP) — a protocol that many folks have never heard of. CWMP, also known as TR-069, runs on TCP port 7547 using HTTP as an application layer protocol, allowing Internet service providers to […]
First, a bit of background about IPMI — how it came about and for what purpose, as well as the limitations and risks inherent in those devices. Nearly all modern servers ship with a secondary out-of-band management system that allows administrators to remotely perform basic monitoring and maintenance — even when the server’s operating system […]
Magecart was the malware behind the British Airways and Ticketmaster data breaches a few years back and, unfortunately, it’s still alive and well. In fact, the latest victim appears to be OXO, a consumer household goods brand. Magecart injects malicious Javascript onto websites hosted from compromised servers. This Javascript runs in clients’ web browsers whenever they visit the website and skims […]
Over the holidays, we added data for remote desktop protocol (RDP) and virtual network computing (VNC) to Censys. Now you can search for any RDP or VNC clients that are online and tied to your organization and ensure that they’re locked down appropriately. These remote desktop instances are basically a front door to your organization […]
Download Censys' 2025 State of the Internet Report for cutting-edge analyses of adversary infrastructure with a focus on C2 services.
Read the Censys blog for expert cybersecurity insights, threat research, industry trends, and practical guides from security professionals.
Read the Censys blog for expert cybersecurity insights, threat research, industry trends, and practical guides from security professionals.
