Tag: smb

Detecting Outlook NTLM Credential Theft via Child Processes and Outbound SMB Auth

A technical walkthrough of the actively exploited Outlook NTLM credential-theft zero-day, covering the exploit path, suspicious Outlook child processes, outbound SMB authentication detection, and mitigation priorities beyond patching.