Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...
Kaspersky warns that hackers are abusing Microsoft Device Code Flow to trick users into granting account access through real ...
Forg365 targets Microsoft 365 with device code and AitM phishing, then uses stolen tokens for persistent browser sessions and ...
The Telegram-distributed service combines AI-assisted lures with device-code phishing and attacker-side session refresh, ...
Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...
A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining ...
New Microsoft 365 phishing kits Jalisco and OmegaLord abuse OAuth codes and fake login pages to bypass MFA and steal cloud ...
The FBI warned that Kali365 can hijack Microsoft 365 accounts by abusing device code authentication and capturing OAuth tokens. A new phishing service is turning a legitimate Microsoft login process ...
In late May, the FBI warned U.S. residents of a new phishing scam, Kali365 targeting Microsoft 365 users. Here's how to ID, what scammers are after.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results