Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data
Threat actors use voice calls and Microsoft Graph API via BYOD devices to access Microsoft 365, then sell access to extortion groups like ShinyHunters.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #graph-api
Attackers call employees’ personal phones to break into Microsoft 365 accounts
Microsoft tracks vishing campaigns by Storm-3121 and Storm-3032 that impersonate IT staff, phish Microsoft 365 credentials, and steal cloud data.