id: 2440
uid: 3h2a4
insdate: 2026-08-07 10:10:09
title: Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
additional: Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses and mapped ports, and exhaust NAT tables.

Presented at Black Hat USA 2026, Stagg said the techniques were demonstrated across network infrastructure devices
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.html
source_url: https://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.html
updated:
image:
author_name:
author_link: