
In a recent wave of cyberattacks, attackers have been observed exploiting the robust infrastructure of Google Firebase Hosting. This notorious campaign involves the utilization of the Sorillus remote access trojan (RAT) alongside sophisticated phishing attacks. This article delves into the attack methodology, the exploitation of Firebase’s legitimacy, the intricate obfuscated phishing kit, and recommendations from eSentire’s Threat Response Unit (TRU)










