project

ANY.RUN Interactive Sandbox

ANY.RUN's browser-based malware sandbox, in which an analyst clicks through a sample and watches its network and system behaviour as it runs.

Known aliases

Interactive Sandbox

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

N0va captures refresh tokens from sign-ins the identity provider itself approved

ANY.RUN says the kit lures staff with Teams, DocuSign and Dropbox pages, walks them through a genuine device code sign-in, and then takes the access and refresh tokens to register a device of its own.

Publishers:thehackernews.com

Reality

Evidence25
Adoption20
Hype gap+45
Incentives85
Confidence60