The one where a JavaScript file handed us the keys.
During an OSINT engagement, we found a forgotten login page still pulling a JavaScript file. Inside: admin credentials in plain text, and full production database access.
Case Studies
These stories are real, but the details are redacted. The names? You’ll never know them. What we can share is how we uncovered the threats no one else could see, and why a constant, relentless attack is the best defense against today’s cyber threats.
Read MoreThe one where a JavaScript file handed us the keys.
The one where we cracked 90% of a Fintech’s passwords using their onboarding process.
A routine assumed compromise scenario at a fintech uncovered a predictable onboarding password pattern. It led to password cracking across more than 90% of employee accounts, including the CEO's, proving a single overlooked process can undo an otherwise strong security programme.
The one where we turned a Telecom’s security nightmare into a masterclass in resilience.
A telecommunications provider believed its defences could hold against anything. A social engineering attack proved otherwise, moving from an exposed API to a company-wide phishing campaign in days. Here's how CovertSwarm got in, and what it took to close the gaps.
The one where we impersonated the head of IT.
A major retailer thought they were talking to their own Head of IT. They weren't. It was CovertSwarm, running a social engineering attack that took full control of their Google Workspace in under a week, using nothing but public information and a convincing voice on the phone.
The one where we pulled off the holiday hangover heist.
No malware, no phishing link, just a phone call and a believable story. This vishing attack walked straight through multi-factor authentication using nothing but a return-from-holiday pretext and a support process built for speed, not scrutiny.
The one where we rewrote the script on security.
A prestigious TV and film production company trusted its digital defences. Physical security testing proved they weren't enough: a compromised office printer led straight to floor plans, a brute-forced access system, and an after-hours walk into their own data centre.
The one where we breached an insurance giant through image uploads.
Three routine image upload forms on a client login portal were all it took. A cloud security assessment turned a scoped proof of concept into full control of an insurance provider's AWS environment, every connected domain, and the databases behind them, in three days.
The one where we owned a cloud platform through a free trial.
A free trial signup was all it took to seize control of a major cloud platform's demo environment. A mistrusted Docker image and an exposed Kubernetes service account token gave us the same access potential customers get when they sign up, plus a route into the provider's Google Workspace.