HomeAI · summaries
Storia in 3 fonti
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
O-UNC-066 uses vishing and a live phishing kit to trick Microsoft 365 users into enrolling attacker-controlled Entra passkeys for account access.
Confronto fonti
3 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, and PRT persistence.
- ·
bleepingcomputer.com
Entra passkey enrollment vishing targets Microsoft 365 users
A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey.
- ·
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with…
- ·
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
O-UNC-066 uses vishing and a live phishing kit to trick Microsoft 365 users into enrolling attacker-controlled Entra passkeys for account access.
- ·
securityweek.com
Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers
A threat actor is targeting organizations across multiple sectors in voice-enabled attacks involving Microsoft 365 phishing pages.