Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data
Threat actors use voice calls and Microsoft Graph API via BYOD devices to access Microsoft 365, then sell access to extortion groups like ShinyHunters.
Dark Reading reports that threat actors are exploiting BYOD scenarios and voice-based social engineering to gain access to Microsoft 365 environments and corporate data. The actors use Microsoft's Graph API to identify lucrative targets within compromised tenants. Access is then passed to extortion groups such as ShinyHunters, which is known for large-scale data theft and extortion campaigns. The source text is a brief summary, so victim counts and full scope are not specified.
- Voice-based social engineering in BYOD contexts used to reach Microsoft 365 corporate data
- Microsoft Graph API leveraged to enumerate environments and identify lucrative targets
- Access subsequently handed to extortion groups, including ShinyHunters
- Organizations permitting BYOD face heightened exposure to voice-led account takeover
- Vendors
- Microsoft
- Products
- Microsoft 365Microsoft Graph
- Threat actors
- ShinyHunters
- Organizations
- Microsoft
From the original article
Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
By Nate Nelson · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.