Unmasking EvilTokens: Getting to the root of device code phishing
Phishing Risk Across 5 Key US Industries: ANY.RUN Data & Mitigation Strategies
8 min
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
in the wild 7 min2
Passkey-themed phishing attacks lead to Microsoft 365 data theft
in the wild 6 min3
Attackers call employees’ personal phones to break into Microsoft 365 accounts
Hackers Pose as IT Support to Hijack Microsoft 365 Accounts With Fake Passkey Alerts
in the wild 5 min2
Passkey-themed social engineering leads to identity and cloud compromise
in the wild 15 min2
Phishing Powers 80% of Attacks on US Companies: How SOCs Can Detect It Early
5 min1
IT help-desk vishing tricks executives into handing over Microsoft 365 access
in the wild 3 min1
BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
in the wild 5 min2
BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft
in the wild 7 min1
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
in the wild1
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
in the wild 3 min1
Outsider Phishing Kit Survives Takedown With 700 New Pages
in the wild 3 min1
Inside Knight Office, a New M365 AiTM Phishing Kit
in the wild 12 min1
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
8 min1
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
1
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
in the wild 4 min1
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset
5 min1
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
in the wild 8 min1