Tag: microsoft
Browse our exclusive articles!
Attackers Use Password-Protected PDF Lures to Launch Microsoft Device Code Phishing
Cybersecurity professionals have long advised users to verify domain names before entering credentials. However, a newly observed phishing campaign is turning this fundamental advice...
ARToken Phishing Kit Uses Cloudflare Workers and SharePoint Lures to Target Microsoft 365 Users
A highly sophisticated Phishing-as-a-Service (PhaaS) platform, ARToken, is actively targeting Microsoft 365 users by chaining together Cloudflare Workers and lookalike SharePoint tenants to bypass...
CodeStorm Phishing Kit Uses Tenant-Aware M365 Replay to Hijack Microsoft 365 Accounts
A highly sophisticated Microsoft 365 phishing campaign leveraging the CodeStorm phishing kit. This multi-organization campaign uses a clever mix of rotating frontend infrastructure and...
Microsoft 365 Users Targeted by Device Code Phishing Campaign Using OAuth 2.0 Flow
Cybersecurity researchers have uncovered an active phishing campaign targeting corporate Microsoft 365 users by exploiting the OAuth 2.0 Device Authorization Grant flow.
Instead of...
New Browser-in-the-Browser Phishing Attack Targets Microsoft 365 Login Credentials
Cybercriminals have launched a highly deceptive phishing campaign targeting Microsoft 365 users. This operation utilizes a sophisticated technique known as a Browser-in-the-Browser (BitB) attack...
