55
55
Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
Doubloon Dredger malware abuses Notion and malicious PDFs to steal Microsoft authentication tokens from victims.
Doubloon Dredger is a malware campaign that abuses Notion and malicious PDF files to harvest Microsoft authentication tokens. Using a legitimate collaboration service likely helps the operation blend into trusted SaaS traffic and evade detection. Stolen Microsoft authentication tokens can enable account access without knowing user passwords.
45
42
30
30
30
60
30
30
47
30
60
30
55
60
57
30
42
30
42
55
47
42
42
30
30
30
42
57
42
42
30
42
55
30
55
60
55
30