
Threat Intelligence
AS-REP Roasting Myths: What Attackers Actually Harvest
AS-REP roasting targets accounts with Kerberos pre-authentication disabled, not weak passwords, and yields offline hashes that never touch the domain controller.
Everything Firewall Chronicle has reported about credential theft: 3 stories, newest first. Part of our Cyber Attacks coverage.

AS-REP roasting targets accounts with Kerberos pre-authentication disabled, not weak passwords, and yields offline hashes that never touch the domain controller.

Attackers compromise legitimate customer support accounts to impersonate brands, bypassing email filters by operating within trusted social platforms rather than through unsolicited messages.

Most simulated phishing campaigns fail to replicate the technical depth of real credential theft, leaving organizations blind to sophisticated credential-harvesting techniques.