- Hackers bargain Windows NTLM authentication hashes successful phishing attacks BleepingComputer
- TA577 Exploits NTLM Authentication Vulnerability Infosecurity Magazine
- Malicious email run steals NTLM hashes CSO Online
- Hackers Using Weaponized ZIP File To Steal NTLM Hashes CybersecurityNews