Kaspersky has outlined a sophisticated phishing method it has seen used in the wild in recent months. It shared tips on how to mitigate the threat.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
Kaspersky has monitored a new phishing campaign where users put one-time codes into Microsoft's legit login flow, giving attackers account access.
Paul Hill
Neowin
@ziks_99 ·
ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
Microsoft 365 users fall victim to one-in-a-million password spray attack
A new cyber threat named Kali365 is targeting Microsoft 365 accounts. This service allows criminals to steal access tokens,…
The FBI has warned that attackers are using a new phishing kit to gain long-term access to Microsoft Outlook, Teams, and OneDrive…
A new phishing attack platform endangers Microsoft environments.
ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA…
MFA? No problem, says crimeware that tricks users into handing attackers the keys to M365
If you see one of these emails — check carefully, you may be under attack.
