Proton VPN

Reported Context (1)

logins from rare external IPs associated with VPS providers, namely Hyonix and Host Universal (via Proton VPN). Darktrace recognized that these logins had occurred within minutes of legitimate user activity from Darktrace Details SaaS Account Hijacks Using VPS Infrastructure

People (3)

MITRE ATT&CK (3)

Vendors (5)

Products (3)

Tools (2)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.