Product
STS
- First Reported
- Feb 26, 2026
- Latest Reported
- Feb 26, 2026
Reported Context (1)
- Attackers bought or scraped Infostealer logs, then stuffed ADFS/STS SSO credentials against edge devices—often via compromised Fortinet appliances—to bypass MFA and gain network access. Infostealer Logs Linked to 77% of Credentials in F5 Credential-Stuffing Campaign
People (2)
MITRE ATT&CK (2)
Vendors (2)
Products (4)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.