This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
ThreatInsight
threatinsight.proofpoint.com
did:plc:5gwujgymmotfb4pszrxoblwb
This novel infection chain ends with a previously unknown JavaScript browser-based implant we call OWAReaper, purpose-built for persistent access inside OWA.
OWAReaper can survive browser reboots, credential rotation, and a full reimage of the victim's device.
2026-07-29T20:34:41.026Z