A Security Tool as the Weapon: Breaking Down the FortiClient EMS Campaign (opens in new tab)

Earlier this month, Arctic Wolf observed a credential theft campaign that didn't need to find a way past the endpoint security stack becuase it used the endp...