Product
Firebase
- First Reported
- Apr 9, 2024
- Latest Reported
- Aug 19, 2026
Reported Context (3)
- data exposed. This operator independently found and exploited that exposure himself: he pulled the Firebase config out of the clone sites' frontend JavaScript, confirmed their Firestore databases had no security CloudSEK Finds AI-Agent-Driven Campaign Behind 12,000 WordPress Backdoors and Crypto Theft
- Masquerading as a Rothschild & Co recruiter, the attackers employ Firebase-hosted phishing pages with custom CAPTCHA challenges, malicious VBS scripts, and multi-stage payload delivery to silently deploy remote MuddyWater-Linked Phishing Campaign Uses Fake Recruiter Lures to Install NetBird
- a heavy focus on stealth and conducting activities under the radar. The use of FlexStarling with a Firebase-based C2 instead of commodity malware or commercially available spyware indicates the threat actor is Starry Addax Uses FlexStarling Android Malware to Target Human Rights Activists in North Africa
Malware (1)
Threat Actors (2)
MITRE ATT&CK (24)
Vendors (3)
Products (28)
Tools (14)
Industries (6)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.