Kali365 targets US organizations with attacker-controlled device codes, potentially exposing Microsoft 365 email, files, and ...
The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.
New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA prompts to maintain access.
A new phishing-as-a-service (PhaaS) campaign is abusing Microsoft’s device code authentication flow to gain unauthorized access to user accounts. Sekoia researchers first spotted the toolkit ...
Hackers are compromising hotel Wi-Fi gateways to redirect business travelers to fake Microsoft 365 login pages that can ...
Beware this highly sophisticated Microsoft 365 attack. Update, March 15, 2025: This story, originally published March 13, has been updated with further technical detail regarding the Microsoft 365 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results