EvilTokens uses AES-GCM encrypted HTML and Microsoft Device Code Phishing to hide Microsoft 365 account takeover pages until ...
Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...
A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining ...
The Telegram-distributed service combines AI-assisted lures with device-code phishing and attacker-side session refresh, ...
New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA ...
Forg365 is a new phishing platform targeting Microsoft 365 accounts with AI emails, AiTM attacks, and device-code abuse.
A threat actor is targeting organizations across multiple sectors in voice-enabled attacks involving Microsoft 365 phishing ...
Microsoft 365 passkey phishing is now targeting enterprise employees mid-rollout: criminal group Pink cold-calls workers ...
After analyzing a reader's suspicious "Microsoft 365" email, ChatGPT concluded it was "very likely a phishing scam" with ...
Ghost phishing campaigns using EvilTokens hide malicious content until browser decryption, enabling stealthy Microsoft 365 ...
The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication using device code tricks.
An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results