Tool
KrbRelayx
- First Reported
- Apr 7, 2026
- Latest Reported
- Apr 18, 2026
Reported Context (2)
- Instead of using a pre-built toolkit, the attackers manually install and compile their tools, including Impacket, KrbRelayx, Coercer, BloodHound.py, NetExec, Kerbrute, and Metasploit, inside the VM. Payouts King Uses Hidden QEMU Virtual Machines to Evade Endpoint Security
- Attacker Machine: Kali Linux — NXC, Rubeus, Evil-WinRM, krbrelayx, Impacket, DNS manipulation tool Walkthrough Demonstrates How NTLM Reflection and Delegation Misconfigurations Can Compromise Active Directory
CVE (1)
Malware (1)
Threat Actors (2)
MITRE ATT&CK (18)
Vendors (4)
Products (9)
Tools (17)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.