Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
Doubloon Dredger malware abuses Notion and malicious PDFs to steal Microsoft authentication tokens from victims.
Doubloon Dredger is a malware campaign that abuses Notion and malicious PDF files to harvest Microsoft authentication tokens. Using a legitimate collaboration service likely helps the operation blend into trusted SaaS traffic and evade detection. Stolen Microsoft authentication tokens can enable account access without knowing user passwords.
- Uses malicious PDFs as infection vector
- Abuses Notion service in the token-harvesting operation
- Targets Microsoft authentication tokens for account access
- Malware
- Doubloon Dredger
From the original article
Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens
infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.