The Dilemma of Attacking Okta, Red Team Operations

Introduction An ominous login page, mysterious isn’t it? This page is seen by hundreds of employees/customers of companies like Discord, Microsoft, Paypal, GoDaddy, Roblox, etc. This is an Okta login page, successfully authenticating yourself with one of these will usually redirect you to a companies internal services, such as: Jira, Confluence, Metrics systems, the whole shebang! Okta? Okta is “an American identity and access management company” that allows companies to easily manage and c

Okta Says US Customers Targeted in Sophisticated Attacks

RedCERT - Red Team Operations

Phishing with SAML and SSO Providers – Jordan Potti – Security Things

Okta system attacked, another Cisco vulnerability, RagnarLocker arrest

Okta Breach Timeline, Attack Method Analyzed - BankInfoSecurity

Guide to Red Team Operations - Hacking Articles

The LAPSUS$ Supply Chain Attack: Third-Party Playbooks and

Threat Trends: DNS Security, Part 1 - Storcom, Lombard, Illinois

Decoding the (Broken) Modern Identity Stack

Self Service Password Reset Tool

Okta investigates LAPSUS$ gang's compromise claims